diff --git a/apps/audiobookshelf/ingress.yaml b/apps/audiobookshelf/ingress.yaml
index 8419a4b..18a746f 100644
--- a/apps/audiobookshelf/ingress.yaml
+++ b/apps/audiobookshelf/ingress.yaml
@@ -9,9 +9,26 @@ spec:
   routes:
   - match: Host(`audiobookshelf.kluster.moll.re`)
     kind: Rule
+    middlewares:
+    - name: audiobookshelf
     services:
     - name: audiobookshelf-web
       port: 80
 
   tls:
-    certResolver: default-tls 
+    certResolver: default-tls
+
+---
+
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: audiobookshelf
+spec:
+  headers:
+    customRequestHeaders:
+      X-Forwarded-Proto: "https"
+      Upgrade: "websocket"
+      Connection: "Upgrade"
+    customResponseHeaders:
+      X-Forwarded-For: "true"
diff --git a/apps/kitchenowl/ingress.yaml b/apps/kitchenowl/ingress.yaml
index 7c4ae5a..6248fb2 100644
--- a/apps/kitchenowl/ingress.yaml
+++ b/apps/kitchenowl/ingress.yaml
@@ -26,5 +26,6 @@ spec:
   headers:
     customRequestHeaders:
       X-Forwarded-Proto: "https"
-      # enable websockets
       Upgrade: "websocket"
+    customResponseHeaders:
+      X-Forwarded-For: "true"