diff --git a/clusters/base/apps/radicale/helmrelease.yaml b/clusters/base/apps/radicale/helmrelease.yaml
index 5318970..5044ce2 100644
--- a/clusters/base/apps/radicale/helmrelease.yaml
+++ b/clusters/base/apps/radicale/helmrelease.yaml
@@ -34,10 +34,11 @@ spec:
         className: traefik
         annotations:
           cert-manager.io/cluster-issuer: letsencrypt-prod
+          traefik.ingress.kubernetes.io/router.middlewares: pim-radicale-stripprefix@kubernetescrd,pim-radicale-headers@kubernetescrd
         hosts:
           - host: c.aggtaa.com
             paths:
-              - path: /
+              - path: /server
                 pathType: Prefix
                 service:
                   identifier: app
diff --git a/clusters/base/apps/radicale/kustomization.yaml b/clusters/base/apps/radicale/kustomization.yaml
index e99a21d..eae78ac 100644
--- a/clusters/base/apps/radicale/kustomization.yaml
+++ b/clusters/base/apps/radicale/kustomization.yaml
@@ -5,3 +5,4 @@ resources:
   - secret.enc.yaml
   - configmap.yaml
   - helmrelease.yaml
+  - middleware.yaml
diff --git a/clusters/base/apps/radicale/middleware.yaml b/clusters/base/apps/radicale/middleware.yaml
new file mode 100644
index 0000000..b82cd09
--- /dev/null
+++ b/clusters/base/apps/radicale/middleware.yaml
@@ -0,0 +1,21 @@
+# middleware order matters!
+
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: radicale-stripprefix
+  namespace: pim
+spec:
+  stripPrefix:
+    prefixes:
+      - /server
+---
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: radicale-headers
+  namespace: pim
+spec:
+  headers:
+    customRequestHeaders:
+      X-Script-Name: /server