diff --git a/kube/deploy/core/monitoring/grafana/app/hr.yaml b/kube/deploy/core/monitoring/grafana/app/hr.yaml
index 94fdfbea..c5563918 100644
--- a/kube/deploy/core/monitoring/grafana/app/hr.yaml
+++ b/kube/deploy/core/monitoring/grafana/app/hr.yaml
@@ -19,6 +19,7 @@ spec:
     podLabels:
       tailscale.com/expose: "true"
       authentik.home.arpa/https: "allow"
+      ingress.home.arpa/nginx-internal: allow
     hostAliases:
       - ip: "${APP_IP_AUTHENTIK}"
         hostnames: ["${APP_DNS_AUTHENTIK}"]