diff --git a/applications/stuff/authentik.yaml b/applications/stuff/authentik.yaml
index c7faf3d..6be07f4 100644
--- a/applications/stuff/authentik.yaml
+++ b/applications/stuff/authentik.yaml
@@ -25,7 +25,20 @@ spec:
 
         server:
           ingress:
-            enabled: false
+            enabled: true
+            annotations:
+              external-dns.alpha.kubernetes.io/hostname: auth.hxme.net
+            hosts:
+              - host: |
+                  auth.hxme.net
+                paths:
+                  - path: /
+                    pathType: Prefix
+            tls:
+              - hosts:
+                  - auth.hxme.net
+                secretName: wildcard-hxme-net
+
   destination:
     server: https://kubernetes.default.svc
     namespace: home-server