diff --git a/clusters/base/apps/authelia/middleware.yaml b/clusters/base/apps/authelia/middleware.yaml
index 8d8cb32..2664030 100644
--- a/clusters/base/apps/authelia/middleware.yaml
+++ b/clusters/base/apps/authelia/middleware.yaml
@@ -5,7 +5,7 @@ metadata:
   namespace: auth
 spec:
   forwardAuth:
-    address: http://authelia.authelia.svc.cluster.local:9091/api/verify?rd=https://auth.aggtaa.com
+    address: http://authelia.auth.svc.cluster.local:9091/api/verify?rd=https://auth.aggtaa.com
     trustForwardHeader: true
     authResponseHeaders:
       - Remote-User
diff --git a/clusters/base/apps/zigbee2mqtt/helmrelease.yaml b/clusters/base/apps/zigbee2mqtt/helmrelease.yaml
index 6255a63..8da9505 100644
--- a/clusters/base/apps/zigbee2mqtt/helmrelease.yaml
+++ b/clusters/base/apps/zigbee2mqtt/helmrelease.yaml
@@ -73,6 +73,7 @@ spec:
       ingressClassName: traefik
       annotations:
         cert-manager.io/cluster-issuer: letsencrypt-prod
+        traefik.ingress.kubernetes.io/router.middlewares: auth-authelia@kubernetescrd
       hosts:
         - host: zigbee2mqtt.aggtaa.com
           paths: