diff --git a/k8s/ingress.yaml b/k8s/ingress.yaml
index d07ac8c..78ce1a7 100644
--- a/k8s/ingress.yaml
+++ b/k8s/ingress.yaml
@@ -5,6 +5,7 @@ metadata:
   annotations:
     kubernetes.io/ingress.class: "traefik"
     cert-manager.io/cluster-issuer: "letsencrypt-prod"
+    traefik.ingress.kubernetes.io/router.middlewares: "default-redirect-https@kubernetescrd"
 spec:
   tls:
   - hosts:
diff --git a/k8s/redirect-https-middleware.yaml b/k8s/redirect-https-middleware.yaml
new file mode 100644
index 0000000..e5eedb9
--- /dev/null
+++ b/k8s/redirect-https-middleware.yaml
@@ -0,0 +1,8 @@
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: redirect-https
+spec:
+  redirectScheme:
+    scheme: https
+    permanent: true