diff --git a/infrastructure/traefik-system/configmap.yaml b/infrastructure/traefik-system/configmap.yaml
index de76115..960bc47 100644
--- a/infrastructure/traefik-system/configmap.yaml
+++ b/infrastructure/traefik-system/configmap.yaml
@@ -77,8 +77,12 @@ data:
         address = ":853"
         # route dns over https to other pods but provide own certificate
 
+      [entryPoints.name.http3]
+        advertisedPort = 443
+
     [metrics]
       [metrics.prometheus]
+      # metrics are enabled and scraping is ensured through a servicemonitor
       entryPoint = "metrics"
       addEntryPointsLabels = true
       addServicesLabels = true
diff --git a/infrastructure/traefik-system/kustomization.yaml b/infrastructure/traefik-system/kustomization.yaml
index 1067e8a..58861d5 100644
--- a/infrastructure/traefik-system/kustomization.yaml
+++ b/infrastructure/traefik-system/kustomization.yaml
@@ -13,6 +13,6 @@ namespace: traefik-system
 helmCharts:
   - name: traefik
     releaseName: traefik
-    version: 27.0.2
+    version: 28.2.0
     valuesFile: values.yaml
     repo: https://traefik.github.io/charts