diff --git a/carrramba-encore-rate-deployment.yaml b/carrramba-encore-rate-deployment.yaml
index 08c9377..5e6cdfd 100644
--- a/carrramba-encore-rate-deployment.yaml
+++ b/carrramba-encore-rate-deployment.yaml
@@ -63,9 +63,11 @@ metadata:
   name: carrramba-encore-rate-frontend-ingress
   annotations:
     traefik.ingress.kubernetes.io/router.entrypoints: web
+    traefik.ingress.kubernetes.io/router.middlewares: default-websecure-redirect@kubernetescrd
 spec:
   rules:
-  - http:
+  - host: carrramba.adrien.run
+    http:
       paths:
       - path: /
         pathType: Prefix
@@ -75,6 +77,32 @@ spec:
             port:
               name: web
 
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: carrramba-encore-rate-websecure-ingress
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-carrramba
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
+spec:
+  tls:
+   - hosts:
+      - carrramba.adrien.run
+     secretName: tls-carrramba-encore-rate-ingress
+  rules:
+  - host: carrramba.adrien.run
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: carrramba-encore-rate-frontend
+            port:
+              name: web
+
+
 ---
 apiVersion: traefik.containo.us/v1alpha1
 kind: Middleware
@@ -100,7 +128,8 @@ spec:
       - carrramba.adrien.run
      secretName: tls-carrramba-encore-rate-ingress
   rules:
-  - http:
+  - host: carrramba.adrien.run
+    http:
       paths:
       - path: /api/
         pathType: Prefix