diff --git a/dmz/authentik/templates/cert.yaml b/dmz/authentik/templates/cert.yaml
index 0bcf9ab..b519683 100644
--- a/dmz/authentik/templates/cert.yaml
+++ b/dmz/authentik/templates/cert.yaml
@@ -25,11 +25,11 @@ spec:
       services:
         - name: infra-cluster
           port: 443
-    - match: Host(`authentik.durp.info`) && PathPrefix(`/outpost.goauthentik.io`)
-      kind: Rule
-      services:
-        - name: ak-outpost-dmz-embedded-outpost
-          port: 9000
+  #    - match: Host(`authentik.durp.info`) && PathPrefix(`/outpost.goauthentik.io`)
+  #      kind: Rule
+  #      services:
+  #        - name: ak-outpost-dmz-embedded-outpost
+  #          port: 9000
   tls:
     secretName: authentik-outpost-tls
 
diff --git a/infra/authentik/templates/ingress.yaml b/infra/authentik/templates/ingress.yaml
index 55c35a2..8e0c956 100644
--- a/infra/authentik/templates/ingress.yaml
+++ b/infra/authentik/templates/ingress.yaml
@@ -11,6 +11,11 @@ spec:
       services:
         - name: authentik-server
           port: 80
+    - match: Host(`authentik.durp.info`) && PathPrefix(`/outpost.goauthentik.io`)
+      kind: Rule
+      services:
+        - name: ak-outpost-authentik-embedded-outpost
+          port: 9000
   tls:
     secretName: authentik-tls