diff --git a/infra/controllers/authentik/authentik.yaml b/infra/controllers/authentik/authentik.yaml
index f41a1af..9cf2d75 100644
--- a/infra/controllers/authentik/authentik.yaml
+++ b/infra/controllers/authentik/authentik.yaml
@@ -55,16 +55,6 @@ spec:
     authentik:
       error_reporting:
         enabled: false
-    server:
-      ingress:
-        ingressClassName: traefik
-        enabled: true
-        hosts:
-          - authentik.yadunut.dev
-        tls:
-          - secretName: wildcard-cert-yadunut.dev-prod
-            hosts:
-              - authentik.yadunut.dev
     postgresql:
       enabled: true
       auth:
diff --git a/infra/controllers/authentik/ingress.yaml b/infra/controllers/authentik/ingress.yaml
new file mode 100644
index 0000000..061fae0
--- /dev/null
+++ b/infra/controllers/authentik/ingress.yaml
@@ -0,0 +1,32 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: authentik-ingress
+  namespace: authentik-system
+spec:
+  ingressClassName: traefik
+  rules:
+  - host: authentik.yadunut.dev
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: authentik-server
+            port:
+              number: 80
+  - host: "*.i.yadunut.dev"
+    http:
+      paths:
+      - path: /outpost.goauthentik.io/
+        pathType: Prefix
+        backend:
+          service:
+            name: authentik-server
+            port:
+              number: 80
+  tls:
+  - hosts:
+    - authentik.yadunut.dev
+    secretName: wildcard-cert-yadunut.dev-prod