diff --git a/podinfo/helmrelease-podinfo.yaml b/podinfo/helmrelease-podinfo.yaml
index 1f6e85b..46cbcef 100644
--- a/podinfo/helmrelease-podinfo.yaml
+++ b/podinfo/helmrelease-podinfo.yaml
@@ -125,6 +125,7 @@ spec:
       className: traefik
       additionalLabels: {}
       annotations:
+        traefik.ingress.kubernetes.io/router.tls: "true"
         traefik.ingress.kubernetes.io/router.entrypoints: websecure
         traefik.ingress.kubernetes.io/router.middlewares: traefik-authentik@kubernetescrd
       hosts:
diff --git a/traefik/helmrelease-traefik.yaml b/traefik/helmrelease-traefik.yaml
index 441f82d..16bf3d7 100644
--- a/traefik/helmrelease-traefik.yaml
+++ b/traefik/helmrelease-traefik.yaml
@@ -255,7 +255,7 @@ spec:
         # -- Load Kubernetes Ingress provider
         enabled: true
         # -- Allows to reference ExternalName services in Ingress
-        allowExternalNameServices: false
+        allowExternalNameServices: true
         # -- Allows to return 503 when there is no endpoints available
         allowEmptyServices: false
         # ingressClass: traefik-internal