diff --git a/kube/deploy/apps/authentik/app/hr.yaml b/kube/deploy/apps/authentik/app/hr.yaml
index 50d94e60..cadf1ad8 100644
--- a/kube/deploy/apps/authentik/app/hr.yaml
+++ b/kube/deploy/apps/authentik/app/hr.yaml
@@ -33,7 +33,7 @@ spec:
       port: 9000
     ingress:
       enabled: true
-      ingressClassName: "nginx-public"
+      ingressClassName: "nginx-external"
       annotations:
         external-dns.alpha.kubernetes.io/target: "${DNS_CF}"
         external-dns.alpha.kubernetes.io/cloudflare-proxied: "true"