diff --git a/charts/stable/meshcentral/Chart.yaml b/charts/stable/meshcentral/Chart.yaml
index dd750b29057..31d671c569d 100644
--- a/charts/stable/meshcentral/Chart.yaml
+++ b/charts/stable/meshcentral/Chart.yaml
@@ -22,7 +22,7 @@ dependencies:
   - condition: mongodb.enabled
     name: mongodb
     repository: https://charts.truecharts.org/
-    version: 4.0.20
+    version: 4.0.21
 maintainers:
   - email: info@truecharts.org
     name: TrueCharts
diff --git a/charts/stable/meshcentral/questions.yaml b/charts/stable/meshcentral/questions.yaml
index dfe1c389864..a9a1afeb688 100644
--- a/charts/stable/meshcentral/questions.yaml
+++ b/charts/stable/meshcentral/questions.yaml
@@ -40,13 +40,15 @@ questions:
                 description: When true, indicates that a TLS offloader is in front of the MeshCentral server. More typically, set this to the IP address of the reverse proxy or TLS offloader so that IP forwarding headers will be trusted. For example traefik.ix-traefik.svc.cluster.local
                 schema:
                   type: string
+                  show_if: [["trustedProxy", "!=", ""]]
                   required: true
                   default: ""
               - variable: trustedProxy
                 label: trustedProxy
-                description: Trust forwarded headers from these IPs or domains.  Providing the magic string "CloudFlare" will cause the server to download the IP address list of trusted CloudFlare proxies directly from CloudFlare on each server start. For example traefik.ix-traefik.svc.cluster.local
+                description: Trust forwarded headers from these IPs or domains. Providing the magic string "CloudFlare" will cause the server to download the IP address list of trusted CloudFlare proxies directly from CloudFlare on each server start. For example traefik.ix-traefik.svc.cluster.local
                 schema:
                   type: string
+                  show_if: [["tlsOffload", "!=", ""]]
                   required: true
                   default: ""
               - variable: WANonly