diff --git a/infra/values/upc-dev/chibisafe-values.yaml b/infra/values/upc-dev/chibisafe-values.yaml
index 0b1c5bc..0900038 100644
--- a/infra/values/upc-dev/chibisafe-values.yaml
+++ b/infra/values/upc-dev/chibisafe-values.yaml
@@ -6,6 +6,23 @@ podAnnotations:
   policies.forteapps.io/auth-oidc-callback-path: "https://chibisafe.forteapps.net/auth/callback"
   policies.forteapps.io/auth-oidc-credentials-secret: "chibisafe-oidc-credentials"
 
-# Ingress disabled — using IngressRoute to target sidecar port directly
 ingress:
   enabled: true
+  className: "traefik"
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+    gethomepage.dev/enabled: "true"
+    gethomepage.dev/name: "Chibisafe"
+    gethomepage.dev/description: "File upload & sharing"
+    gethomepage.dev/group: "Storage"
+    gethomepage.dev/icon: "chibisafe"
+    gethomepage.dev/href: "https://chibisafe.forteapps.net"
+  hosts:
+  - host: chibisafe.forteapps.net
+    paths:
+    - path: /
+      pathType: Prefix
+  tls:
+  - secretName: chibisafe-tls
+    hosts:
+    - chibisafe.forteapps.net