diff --git a/planpalto-helm/argocd/apps/monitoring.yaml b/planpalto-helm/argocd/apps/monitoring.yaml
index b0e820c..fe48fc5 100644
--- a/planpalto-helm/argocd/apps/monitoring.yaml
+++ b/planpalto-helm/argocd/apps/monitoring.yaml
@@ -24,7 +24,7 @@ spec:
             passwordKey: admin-password
           grafana.ini:
             server:
-              root_url: https://fakhri-grafana.sandbox.devopsinstitute.id
+              root_url: https://fakhri-grafana.private.sandbox.devopsinstitute.id
             auth.anonymous:
               enabled: false
           ingress:
@@ -36,11 +36,11 @@ spec:
               alb.ingress.kubernetes.io/backend-protocol: HTTP
               alb.ingress.kubernetes.io/listen-ports: '[{"HTTP":80},{"HTTPS":443}]'
               alb.ingress.kubernetes.io/ssl-redirect: '443'
-              alb.ingress.kubernetes.io/certificate-arn: arn:aws:acm:ap-southeast-3:134604498185:certificate/bf0e14cb-57a3-48e9-95f2-ed16f17f1b8e
+              alb.ingress.kubernetes.io/certificate-arn: arn:aws:acm:ap-southeast-3:134604498185:certificate/2dabc824-d06a-4c02-84a2-98b1ecb9405b
               alb.ingress.kubernetes.io/healthcheck-path: /api/health
               alb.ingress.kubernetes.io/group.name: planpal-internal
             hosts:
-              - fakhri-grafana.sandbox.devopsinstitute.id
+              - fakhri-grafana.private.sandbox.devopsinstitute.id
         # Prometheus: full defaults, kept internal. gp3 PVC, default retention.
         prometheus:
           prometheusSpec: