diff --git a/kube/deploy/apps/jellyfin/app/hr.yaml b/kube/deploy/apps/jellyfin/app/hr.yaml
index b1fbc0ad..41158561 100644
--- a/kube/deploy/apps/jellyfin/app/hr.yaml
+++ b/kube/deploy/apps/jellyfin/app/hr.yaml
@@ -22,6 +22,7 @@ spec:
         pod:
           labels:
             ingress.home.arpa/nginx-internal: "allow"
+            ingress.home.arpa/nginx-external: "allow"
             egress.home.arpa/internet: "allow"
             egress.home.arpa/dlna: "allow"
             authentik.home.arpa/ldap: "allow"