diff --git a/littlelink/templates/ingress.yaml b/littlelink/templates/ingress.yaml
index 42139f7..4a76e33 100644
--- a/littlelink/templates/ingress.yaml
+++ b/littlelink/templates/ingress.yaml
@@ -9,9 +9,7 @@ spec:
   - match: Host(`links.dev.durp.info`) && PathPrefix(`/`)
     kind: Rule
     middlewares:
-    - name: whitelist
-      namespace: traefik 
-    - name: traefik-real-ip
+    - name: internalOnly
       namespace: traefik 
     services:
     - name: littlelink
diff --git a/traefik/templates/middleware-chain.yaml b/traefik/templates/middleware-chain.yaml
new file mode 100644
index 0000000..c38a5d5
--- /dev/null
+++ b/traefik/templates/middleware-chain.yaml
@@ -0,0 +1,9 @@
+apiVersion: traefik.containo.us/v1alpha1
+kind: Middleware
+metadata:
+  name: internalOnly
+spec:
+  chain:
+    middlewares:
+    - name: traefik-real-ip
+    - name: whitelist