diff --git a/applications/templates/authentik.yaml b/applications/templates/authentik.yaml
index 58b807d..96db344 100644
--- a/applications/templates/authentik.yaml
+++ b/applications/templates/authentik.yaml
@@ -34,12 +34,12 @@ spec:
             serviceMonitor:
               enabled: true
           ingress:
-            ingressClassName: traefik
             enabled: true
             hosts:
               - authentik.noxxos.nl
+              - auth.noxxos.nl
             annotations:
-              traefik.ingress.kubernetes.io/router.entrypoints: web
+              traefik.ingress.kubernetes.io/router.entrypoints: websecure
           volumes:
             - name: postgres-creds
               secret:
diff --git a/applications/templates/kube-prometheus-stack.yaml b/applications/templates/kube-prometheus-stack.yaml
index d8f828d..844c2a0 100644
--- a/applications/templates/kube-prometheus-stack.yaml
+++ b/applications/templates/kube-prometheus-stack.yaml
@@ -40,7 +40,7 @@ spec:
           ingress:
             enabled: true
             annotations:
-              traefik.ingress.kubernetes.io/router.entrypoints: web
+              traefik.ingress.kubernetes.io/router.entrypoints: websecure
             hosts:
               - grafana.noxxos.nl
           grafana.ini:
@@ -64,7 +64,7 @@ spec:
           ingress:
             enabled: true
             annotations:
-              traefik.ingress.kubernetes.io/router.entrypoints: web
+              traefik.ingress.kubernetes.io/router.entrypoints: websecure
             hosts:
               - prometheus.noxxos.nl
           serviceMonitor:
diff --git a/applications/templates/rook-ceph-cluster.yaml b/applications/templates/rook-ceph-cluster.yaml
index 2d82b5e..2f2c283 100644
--- a/applications/templates/rook-ceph-cluster.yaml
+++ b/applications/templates/rook-ceph-cluster.yaml
@@ -26,7 +26,7 @@ spec:
         ingress:
           dashboard:
             annotations:
-              traefik.ingress.kubernetes.io/router.entrypoints: web
+              traefik.ingress.kubernetes.io/router.entrypoints: websecure
             host:
               name: ceph.noxxos.nl
               path: /
@@ -193,7 +193,7 @@ spec:
             ingress:
               enabled: true
               annotations:
-                traefik.ingress.kubernetes.io/router.entrypoints: web
+                traefik.ingress.kubernetes.io/router.entrypoints: websecure
               host:
                 name: s3.noxxos.nl
                 path: /