diff --git a/argocd/apps/cert-manager/include/hemmelig-certificate.yaml b/argocd/apps/cert-manager/include/hemmelig-certificate.yaml
index 36c42bc..e8b6322 100644
--- a/argocd/apps/cert-manager/include/hemmelig-certificate.yaml
+++ b/argocd/apps/cert-manager/include/hemmelig-certificate.yaml
@@ -2,7 +2,7 @@ apiVersion: cert-manager.io/v1
 kind: Certificate
 metadata:
   name: hemmelig-cert
-  namespace: default
+  namespace: kube-system
 spec:
   secretName: hemmelig-tls
   issuerRef:
diff --git a/config/hemmelig/hemmelig-ingress.yaml b/config/hemmelig/hemmelig-ingress.yaml
deleted file mode 100644
index d6f6383..0000000
--- a/config/hemmelig/hemmelig-ingress.yaml
+++ /dev/null
@@ -1,16 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
-metadata:
-  name: hemmelig-docker-route
-  namespace: default
-spec:
-  entryPoints:
-    - websecure
-  routes:
-    - match: Host(`paste.innovation-hub-niedersachsen.de`)
-      kind: Rule
-      services:
-        - name: hemmelig-docker
-          port: 80
-  tls:
-    certResolver: default
diff --git a/config/hemmelig/hemmelig-ingressroute.yaml b/config/hemmelig/hemmelig-ingressroute.yaml
new file mode 100644
index 0000000..3a381b4
--- /dev/null
+++ b/config/hemmelig/hemmelig-ingressroute.yaml
@@ -0,0 +1,51 @@
+---
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: hemmelig-stripprefix
+  namespace: kube-system
+spec:
+  stripPrefix:
+    prefixes:
+      - /
+---
+apiVersion: traefik.io/v1alpha1
+kind: ServersTransport
+metadata:
+  name: hemmelig-transport
+  namespace: kube-system
+spec:
+  insecureSkipVerify: true
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: hemmelig-external
+  namespace: kube-system
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`paste.innovation-hub-niedersachsen.de`)
+      kind: Rule
+      services:
+        - name: hemmelig-external-service
+          port: 3000
+          scheme: http
+          serversTransport: hemmelig-transport
+      middlewares:
+        - name: hemmelig-stripprefix
+  tls:
+    secretName: hemmelig-tls
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: hemmelig-external-service
+  namespace: kube-system
+spec:
+  type: ExternalName
+  externalName: 192-168-4-106.nip.io
+  ports:
+    - port: 3000
+      targetPort: 3000
diff --git a/config/hemmelig/hemmelig-service.yaml b/config/hemmelig/hemmelig-service.yaml
deleted file mode 100644
index 5e5814d..0000000
--- a/config/hemmelig/hemmelig-service.yaml
+++ /dev/null
@@ -1,25 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: hemmelig-docker
-  namespace: default
-spec:
-  ports:
-    - port: 80
-      targetPort: 3000
-  clusterIP: None
----
-apiVersion: discovery.k8s.io/v1
-kind: EndpointSlice
-metadata:
-  name: hemmelig-docker
-  namespace: default
-  labels:
-    kubernetes.io/service-name: hemmelig-docker
-addressType: IPv4
-ports:
-  - name: http
-    port: 3000
-endpoints:
-  - addresses:
-      - 192.168.4.106