diff --git a/k8s/apps/immich/service.yaml b/k8s/apps/immich/service.yaml
index 6f8f2a9..9378e90 100644
--- a/k8s/apps/immich/service.yaml
+++ b/k8s/apps/immich/service.yaml
@@ -97,6 +97,24 @@ spec:
                 name: immich-server
                 port:
                   number: 2283
+  tls:
+    - secretName: immich-tls
+      hosts:
+        - photos.hexor.cy
+
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: immich-homenet-tls-ingress
+  annotations:
+    ingressClassName: traefik
+    cert-manager.io/cluster-issuer: hexor-lab
+    traefik.ingress.kubernetes.io/router.middlewares: |
+      kube-system-https-redirect@kubernetescrd, immich-upload-buffering@kubernetescrd
+    acme.cert-manager.io/http01-edit-in-place: "true"
+spec:
+  rules:
     - host: photos.homenet
       http:
         paths:
@@ -108,7 +126,6 @@ spec:
                 port:
                   number: 2283
   tls:
-    - secretName: immich-tls
+    - secretName: immich-homenet-tls
       hosts:
-        - photos.hexor.cy
         - photos.homenet
\ No newline at end of file