diff --git a/apps/system/cilium/values.yaml b/apps/system/cilium/values.yaml
index 7a5d7be..72e8efe 100644
--- a/apps/system/cilium/values.yaml
+++ b/apps/system/cilium/values.yaml
@@ -11,3 +11,17 @@ cilium:
       enabled: true
     ui:
       enabled: true
+      ingress:
+        enabled: true
+        annotations:
+          kubernetes.io/ingress.class: nginx
+          kubernetes.io/tls-acme: "true"
+          cert-manager.io/cluster-issuer: letsencrypt
+          nginx.ingress.kubernetes.io/auth-url: "http://oauth2-proxy.oauth2-proxy.svc.cluster.local/auth"
+          nginx.ingress.kubernetes.io/auth-signin: "https://oauth2.ioot.xyz/start?rd=$escaped_request_uri"
+        hosts:
+          - hubble.ioot.xyz
+        tls:
+          - hosts:
+              - hubble.ioot.xyz
+            secretName: hubble-tls