diff --git a/Charts/traefik/values.yaml b/Charts/traefik/values.yaml
index 14361c2..ad3c800 100644
--- a/Charts/traefik/values.yaml
+++ b/Charts/traefik/values.yaml
@@ -54,11 +54,11 @@ traefik:
               name: auto-cloudflared-secrets
         env:
           - name: TRAEFIK_SERVICE_ENDPOINT
-            value: http://localhost:8000
+            value: https://localhost:8443
           - name: TRAEFIK_API_ENDPOINT
             value: http://localhost:9000
           - name: TRAEFIK_ENTRYPOINT
-            value: web
+            value: websecure
       # volumeMounts:
       #   - name: dsdsocket
       #     mountPath: /socket
@@ -337,30 +337,30 @@ traefik:
       # Added in 2.2, you can make permanent redirects via entrypoints.
       # https://docs.traefik.io/routing/entrypoints/#redirection
       # redirectTo: websecure
-    # websecure:
-    #   port: 8443
-    #   # hostPort: 8443
-    #   expose: true
-    #   exposedPort: 443
-    #   # The port protocol (TCP/UDP)
-    #   protocol: TCP
-    #   # nodePort: 32443
-    #   # Enable HTTP/3.
-    #   # Requires enabling experimental http3 feature and tls.
-    #   # Note that you cannot have a UDP entrypoint with the same port.
-    #   http3: true
-    #   # Set TLS at the entrypoint
-    #   # https://doc.traefik.io/traefik/routing/entrypoints/#tls
-    #   tls:
-    #     enabled: true
-    #     # this is the name of a TLSOption definition
-    #     options: ""
-    #     certResolver: cf
-    #     domains:
-    #       - main: roxedus.com
-    #         sans:
-    #           - "*.roxedus.com"
-    #     #     - bar.example.com
+    websecure:
+      port: 8443
+      # hostPort: 8443
+      expose: true
+      exposedPort: 443
+      # The port protocol (TCP/UDP)
+      protocol: TCP
+      # nodePort: 32443
+      # Enable HTTP/3.
+      # Requires enabling experimental http3 feature and tls.
+      # Note that you cannot have a UDP entrypoint with the same port.
+      http3: true
+      # Set TLS at the entrypoint
+      # https://doc.traefik.io/traefik/routing/entrypoints/#tls
+      # tls:
+      #   enabled: true
+      #   # this is the name of a TLSOption definition
+      #   options: ""
+      #   certResolver: cf
+      #   domains:
+      #     - main: roxedus.com
+      #       sans:
+      #         - "*.roxedus.com"
+      #     - bar.example.com
     metrics:
       port: 9100
       # hostPort: 9100
diff --git a/Deployments/argo-ingress.yaml b/Deployments/argo-ingress.yaml
index a0504a4..4af4fae 100644
--- a/Deployments/argo-ingress.yaml
+++ b/Deployments/argo-ingress.yaml
@@ -5,7 +5,7 @@ metadata:
   namespace: default
 spec:
   entryPoints:
-    - web
+    - websecure
   routes:
     - kind: Rule
       match: Host(`argocd.roxedus.com`)
diff --git a/Deployments/traefik-ingress.yaml b/Deployments/traefik-ingress.yaml
index 436879d..b534130 100644
--- a/Deployments/traefik-ingress.yaml
+++ b/Deployments/traefik-ingress.yaml
@@ -6,7 +6,7 @@ metadata:
   namespace: default
 spec:
   entryPoints:
-    - web
+    - websecure
   routes:
     - kind: Rule
       match: Host(`traefik.roxedus.com`) && PathPrefix(`/dashboard`)