diff --git a/apps/kitchenowl/ingress.yaml b/apps/kitchenowl/ingress.yaml
index b03b41e..7c4ae5a 100644
--- a/apps/kitchenowl/ingress.yaml
+++ b/apps/kitchenowl/ingress.yaml
@@ -8,10 +8,23 @@ spec:
     - websecure
   routes:
   - match: Host(`kitchen.kluster.moll.re`)
+    middlewares:
+      - name: kitchenowl
     kind: Rule
     services:
     - name: kitchenowl-web
       port: 8080
 
   tls:
-    certResolver: default-tls 
+    certResolver: default-tls
+---
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: kitchenowl
+spec:
+  headers:
+    customRequestHeaders:
+      X-Forwarded-Proto: "https"
+      # enable websockets
+      Upgrade: "websocket"