diff --git a/external/ingress.yaml b/external/ingress.yaml
index a3f7107..02c1a93 100644
--- a/external/ingress.yaml
+++ b/external/ingress.yaml
@@ -1,10 +1,10 @@
 apiVersion: traefik.containo.us/v1alpha1
 kind: IngressRoute
 metadata:
-  name: traefik-internal-tls
+  name: traefik-external-tls
   namespace: kube-system
   annotations:
-    kubernetes.io/ingress.class: traefik-internal
+    kubernetes.io/ingress.class: traefik-external
 spec:
   entryPoints:
     - websecure
@@ -13,7 +13,7 @@ spec:
     domains:
     - main: "*.ducoterra.net"
   routes:
-  - match: Host(`traefik-internal.ducoterra.net`)
+  - match: Host(`traefik-external.ducoterra.net`)
     kind: Rule
     services:
     - name: traefik-external-admin
@@ -24,15 +24,15 @@ spec:
 apiVersion: traefik.containo.us/v1alpha1
 kind: IngressRoute
 metadata:
-  name: traefik-internal-web
+  name: traefik-external-web
   namespace: kube-system
   annotations:
-    kubernetes.io/ingress.class: traefik-internal
+    kubernetes.io/ingress.class: traefik-external
 spec:
   entryPoints:
     - web
   routes:
-  - match: Host(`traefik-internal.ducoterra.net`)
+  - match: Host(`traefik-external.ducoterra.net`)
     kind: Rule
     services:
     - name: traefik-external-admin
diff --git a/internal/ingress.yaml b/internal/ingress.yaml
new file mode 100644
index 0000000..a3f7107
--- /dev/null
+++ b/internal/ingress.yaml
@@ -0,0 +1,41 @@
+apiVersion: traefik.containo.us/v1alpha1
+kind: IngressRoute
+metadata:
+  name: traefik-internal-tls
+  namespace: kube-system
+  annotations:
+    kubernetes.io/ingress.class: traefik-internal
+spec:
+  entryPoints:
+    - websecure
+  tls:
+    certResolver: myresolver
+    domains:
+    - main: "*.ducoterra.net"
+  routes:
+  - match: Host(`traefik-internal.ducoterra.net`)
+    kind: Rule
+    services:
+    - name: traefik-external-admin
+      port: 8080
+
+---
+
+apiVersion: traefik.containo.us/v1alpha1
+kind: IngressRoute
+metadata:
+  name: traefik-internal-web
+  namespace: kube-system
+  annotations:
+    kubernetes.io/ingress.class: traefik-internal
+spec:
+  entryPoints:
+    - web
+  routes:
+  - match: Host(`traefik-internal.ducoterra.net`)
+    kind: Rule
+    services:
+    - name: traefik-external-admin
+      port: 8080
+    middlewares:
+      - name: httpsredirect
\ No newline at end of file
diff --git a/internal/service.yaml b/internal/service.yaml
index ec5512b..54f2a5e 100644
--- a/internal/service.yaml
+++ b/internal/service.yaml
@@ -15,4 +15,18 @@ spec:
     - protocol: TCP
       port: 443
       name: websecure
-      targetPort: 443
\ No newline at end of file
+      targetPort: 443
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: traefik-internal-admin
+  namespace: kube-system
+spec:
+  selector:
+    app: traefik-internal-controller
+  ports:
+    - protocol: TCP
+      port: 8080
+      name: admin
+      targetPort: 8080
\ No newline at end of file