diff --git a/pihole/ingress.yaml b/pihole/ingress.yaml
new file mode 100644
index 0000000..b04e33b
--- /dev/null
+++ b/pihole/ingress.yaml
@@ -0,0 +1,24 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: pihole
+  namespace: pihole
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+spec:
+  ingressClassName: traefik
+  tls:
+  - hosts:
+    - pihole.rogi.casa
+    secretName: pihole-tls
+  rules:
+  - host: pihole.rogi.casa
+    http:
+      paths:
+        - path: /
+          pathType: Prefix
+          backend:
+            service:
+              name: pihole-web
+              port:
+                number: 80
diff --git a/pihole/pihole.yaml b/pihole/pihole.yaml
index 4ad4607..77647e4 100644
--- a/pihole/pihole.yaml
+++ b/pihole/pihole.yaml
@@ -2,7 +2,7 @@ apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
   name: pihole-pvc
-  namespace: default
+  namespace: pihole
 spec:
   accessModes:
     - ReadWriteOnce
@@ -14,7 +14,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: pihole
-  namespace: default
+  namespace: pihole
   labels:
     app: pihole
 spec:
@@ -92,7 +92,7 @@ apiVersion: v1
 kind: Service
 metadata:
   name: pihole-web
-  namespace: default
+  namespace: pihole
   labels:
     app: pihole
 spec:
@@ -109,7 +109,7 @@ apiVersion: v1
 kind: Service
 metadata:
   name: pihole-dns
-  namespace: default
+  namespace: pihole
   labels:
     app: pihole
 spec: