diff --git a/dmz/longhorn/templates/ingress.yaml b/dmz/longhorn/templates/ingress.yaml
index dbf05e3..7067a2d 100644
--- a/dmz/longhorn/templates/ingress.yaml
+++ b/dmz/longhorn/templates/ingress.yaml
@@ -8,16 +8,18 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`longhorn.dmz.durp.info`) && PathPrefix(`/`)
-    kind: Rule
-    services:
-    - name: longhorn-frontend
-      port: 80
+    - match: Host(`longhorn.dmz.durp.info`) && PathPrefix(`/`)
+      kind: Rule
+      middlewares:
+        - name: authentik-proxy-provider
+          namespace: traefik
+      services:
+        - name: longhorn-frontend
+          port: 80
   tls:
     secretName: longhorn-tls
 
 ---
-
 apiVersion: cert-manager.io/v1
 kind: Certificate
 metadata:
diff --git a/infra/longhorn/templates/ingress.yaml b/infra/longhorn/templates/ingress.yaml
index 93db852..e9a3a2b 100644
--- a/infra/longhorn/templates/ingress.yaml
+++ b/infra/longhorn/templates/ingress.yaml
@@ -8,16 +8,18 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`longhorn.infra.durp.info`) && PathPrefix(`/`)
-    kind: Rule
-    services:
-    - name: longhorn-frontend
-      port: 80
+    - match: Host(`longhorn.infra.durp.info`) && PathPrefix(`/`)
+      kind: Rule
+      middlewares:
+        - name: authentik-proxy-provider
+          namespace: traefik
+      services:
+        - name: longhorn-frontend
+          port: 80
   tls:
     secretName: longhorn-tls
 
 ---
-
 apiVersion: cert-manager.io/v1
 kind: Certificate
 metadata: