diff --git a/infrastructure/external/kustomization.yaml b/infrastructure/external/kustomization.yaml
index 77c0590..a6f6a8b 100644
--- a/infrastructure/external/kustomization.yaml
+++ b/infrastructure/external/kustomization.yaml
@@ -8,4 +8,5 @@ resources:
   - namespace.yaml
   - omv-s3.ingress.yaml
   - openmediavault.ingress.yaml
-  - proxmox.ingress.yaml
\ No newline at end of file
+  - proxmox.ingress.yaml
+  - wireguard.ingress.yaml
\ No newline at end of file
diff --git a/infrastructure/external/wireguard.ingress.yaml b/infrastructure/external/wireguard.ingress.yaml
new file mode 100644
index 0000000..f57b346
--- /dev/null
+++ b/infrastructure/external/wireguard.ingress.yaml
@@ -0,0 +1,38 @@
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: wireguard-ingressroute
+  namespace: external
+spec:
+  entryPoints:
+    - websecure
+  routes:
+  - match: Host(`wireguard.kluster.moll.re`)
+    kind: Rule
+    services:
+    - name: wireguard
+      port: 443
+      scheme: https
+  tls:
+    certResolver: default-tls
+---
+apiVersion: v1
+kind: Endpoints
+metadata:
+  name: wireguard
+  namespace: external
+subsets:
+  - addresses:
+      - ip: 192.168.2.1
+    ports:
+      - port: 443
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: wireguard
+  namespace: external
+spec:
+  ports:
+    - port: 443
+      targetPort: 443
\ No newline at end of file