diff --git a/apps/infra/monitor/crowdsec/helmchart.yaml b/apps/infra/monitor/crowdsec/helmchart.yaml
index fb85b30..b9e01b8 100644
--- a/apps/infra/monitor/crowdsec/helmchart.yaml
+++ b/apps/infra/monitor/crowdsec/helmchart.yaml
@@ -39,17 +39,32 @@ spec:
       persistentVolume:
         config:
           enabled: false
-    lapi:
+    appsec:
+      enabled: true
       affinity:
         nodeAffinity:
           preferredDuringSchedulingIgnoredDuringExecution:
-            - preference:
+            - weight: 1
+              preference:
+                matchExpressions:
+                  - key: topology.kubernetes.io/region
+                    operator: In
+                    values:
+                      - cn-hk
+      env:
+        - name: COLLECTIONS
+          value: "crowdsecurity/appsec-virtual-patching crowdsecurity/appsec-generic-rules"
+    lapi:
+      affinity:
+        nodeAffinity:
+          preferredDuringSchedulingIgnoredDuringExecution:
+            - weight: 1
+              preference:
                 matchExpressions:
                   - key: topology.kubernetes.io/region
                     operator: In
                     values:
                       - cn-hk
-              weight: 1
       resources:
         limits:
           memory: 200Mi
diff --git a/apps/infra/net/nginx/helmchart.yaml b/apps/infra/net/nginx/helmchart.yaml
index 2fa0398..4fa7c6c 100644
--- a/apps/infra/net/nginx/helmchart.yaml
+++ b/apps/infra/net/nginx/helmchart.yaml
@@ -123,7 +123,7 @@ spec:
             - name: MODE
               value: "live"
             - name: CACHE_EXPIRATION
-              value: "10"
+              value: "3"
             - name: REQUEST_TIMEOUT
               value: "1000"
             - name: CAPTCHA_PROVIDER