diff --git a/kubernetes/talos-flux/apps/kube-system/csi-driver-nfs/app/helm-release.yaml b/kubernetes/talos-flux/apps/kube-system/csi-driver-nfs/app/helm-release.yaml
index ac86a066b..f7bc3ed9f 100644
--- a/kubernetes/talos-flux/apps/kube-system/csi-driver-nfs/app/helm-release.yaml
+++ b/kubernetes/talos-flux/apps/kube-system/csi-driver-nfs/app/helm-release.yaml
@@ -26,5 +26,10 @@ spec:
   uninstall:
     keepHistory: false
   values:
+    # https://artifacthub.io/packages/helm/csi-driver-nfs/csi-driver-nfs?modal=values
     externalSnapshotter:
       enabled: false
+    volumeSnapshotClass:
+      create: true
+      name: nfs-csi-snapshot
+      deletionPolicy: Delete
diff --git a/kubernetes/talos-flux/apps/secops/vault/app/helm-release.yaml b/kubernetes/talos-flux/apps/secops/vault/app/helm-release.yaml
index af71daa04..a4cfd77bf 100644
--- a/kubernetes/talos-flux/apps/secops/vault/app/helm-release.yaml
+++ b/kubernetes/talos-flux/apps/secops/vault/app/helm-release.yaml
@@ -75,7 +75,7 @@ spec:
         enabled: true
         size: 1Gi
         mountPath: /vault/data
-        storageClass: ceph-block
+        storageClass: nfs-csi
       auditStorage:
         enabled: true
         size: 1Gi
diff --git a/kubernetes/talos-flux/apps/secops/vault/app/persistent-volume-claim.yaml b/kubernetes/talos-flux/apps/secops/vault/app/persistent-volume-claim.yaml
index 64dedb0f1..8e74f2440 100644
--- a/kubernetes/talos-flux/apps/secops/vault/app/persistent-volume-claim.yaml
+++ b/kubernetes/talos-flux/apps/secops/vault/app/persistent-volume-claim.yaml
@@ -13,4 +13,4 @@ spec:
   resources:
     requests:
       storage: 1Gi
-  storageClassName: ceph-block
+  storageClassName: nfs-csi
diff --git a/kubernetes/talos-flux/apps/secops/vault/app/replication-destination.yaml b/kubernetes/talos-flux/apps/secops/vault/app/replication-destination.yaml
index 7a4f4dd6d..ae29080fe 100644
--- a/kubernetes/talos-flux/apps/secops/vault/app/replication-destination.yaml
+++ b/kubernetes/talos-flux/apps/secops/vault/app/replication-destination.yaml
@@ -13,12 +13,12 @@ spec:
   restic:
     repository: vault-volsync
     copyMethod: Snapshot
-    volumeSnapshotClassName: csi-ceph-blockpool
-    cacheStorageClassName: ceph-block
+    volumeSnapshotClassName: nfs-csi-snapshot
+    cacheStorageClassName: nfs-csi
     cacheAccessModes:
       - ReadWriteOnce
     cacheCapacity: 1Gi
-    storageClassName: ceph-block
+    storageClassName: nfs-csi
     accessModes:
       - ReadWriteOnce
     capacity: 1Gi
diff --git a/kubernetes/talos-flux/apps/secops/vault/app/replication-source.yaml b/kubernetes/talos-flux/apps/secops/vault/app/replication-source.yaml
index f1025c8c1..d915d197f 100644
--- a/kubernetes/talos-flux/apps/secops/vault/app/replication-source.yaml
+++ b/kubernetes/talos-flux/apps/secops/vault/app/replication-source.yaml
@@ -12,12 +12,12 @@ spec:
     copyMethod: Snapshot
     pruneIntervalDays: 14
     repository: vault-volsync
-    volumeSnapshotClassName: csi-ceph-blockpool
+    volumeSnapshotClassName: nfs-csi-snapshot
     cacheCapacity: 1Gi
-    cacheStorageClassName: ceph-block
+    cacheStorageClassName: nfs-csi
     cacheAccessModes:
       - ReadWriteOnce
-    storageClassName: ceph-block
+    storageClassName: nfs-csi
     accessModes:
       - ReadWriteOnce
     moverSecurityContext: