diff --git a/charts/incubator/meshcentral/Chart.yaml b/charts/incubator/meshcentral/Chart.yaml
index 0423f47c166..fccc3165537 100644
--- a/charts/incubator/meshcentral/Chart.yaml
+++ b/charts/incubator/meshcentral/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 kubeVersion: ">=1.16.0-0"
 name: meshcentral
 appVersion: "1.0.90"
-version: 5.0.10
+version: 5.0.11
 description: MeshCentral is a full computer management web site
 type: application
 deprecated: false
diff --git a/charts/incubator/meshcentral/questions.yaml b/charts/incubator/meshcentral/questions.yaml
index c0d8dd85c89..8f902bb7857 100644
--- a/charts/incubator/meshcentral/questions.yaml
+++ b/charts/incubator/meshcentral/questions.yaml
@@ -37,21 +37,24 @@ questions:
                 description: Set this to the primary DNS name of this MeshCentral server.
                 schema:
                   type: string
-                  # required: true
                   default: ""
               - variable: tlsOffload
                 label: tlsOffload
-                description: When true, indicates that a TLS offloader is in front of the MeshCentral server. More typically, set this to the IP address of the reverse proxy or TLS offloader so that IP forwarding headers will be trusted. For example 127.0.0.1,traefik.ix-traefik.svc.cluster.local
+                description: When true, indicates that a TLS offloader is in front of the MeshCentral server. More typically, set this to the IP address of the reverse proxy or TLS offloader so that IP forwarding headers will be trusted. For example traefik.ix-traefik.svc.cluster.local
                 schema:
                   type: string
-                  # required: true
                   default: ""
               - variable: trustedProxy
                 label: trustedProxy
-                description: Trust forwarded headers from these IPs or domains.  Providing the magic string "CloudFlare" will cause the server to download the IP address list of trusted CloudFlare proxies directly from CloudFlare on each server start. For example 127.0.0.1,traefik.ix-traefik.svc.cluster.local
+                description: Trust forwarded headers from these IPs or domains.  Providing the magic string "CloudFlare" will cause the server to download the IP address list of trusted CloudFlare proxies directly from CloudFlare on each server start. For example traefik.ix-traefik.svc.cluster.local
+                schema:
+                  type: string
+                  default: ""
+              - variable: maintenanceMode
+                label: maintenanceMode
+                description: When enabled the server is in maintenance mode, only administrators can login. Use the maintenance command in server console to change.
                 schema:
                   type: string
-                  # required: true
                   default: ""
               - variable: WANonly
                 label: WANonly
diff --git a/charts/incubator/meshcentral/values.yaml b/charts/incubator/meshcentral/values.yaml
index 2480123b0c7..01bf926930e 100644
--- a/charts/incubator/meshcentral/values.yaml
+++ b/charts/incubator/meshcentral/values.yaml
@@ -50,7 +50,7 @@ meshcentral:
     # - When enabled, only MeshCentral LAN features are enabled and agents will find the server using multicast LAN packets.
     LANonly: false
     # - When enabled the server is in maintenance mode, only administrators can login. Use the maintenance command in server console to change.
-    maintenanceMode: false
+    maintenanceMode: ""
     allowLoginToken: false
     # - Controls the Strict-Transport-Security header, default is 1 year. Set to false to remove, true to force enable, or string to set a custom value. If set to null, MeshCentral will enable if a trusted certificate is set.
     _StrictTransportSecurity: null