diff --git a/kube/deploy/apps/nfs-web/app/hr.yaml b/kube/deploy/apps/nfs-web/app/hr.yaml
index 3826cd32..3a3068f3 100644
--- a/kube/deploy/apps/nfs-web/app/hr.yaml
+++ b/kube/deploy/apps/nfs-web/app/hr.yaml
@@ -65,6 +65,21 @@ spec:
         tls:
           - hosts:
               - *host
+      tailscale:
+        enabled: true
+        primary: false
+        className: "tailscale"
+        hosts:
+          - host: &host "files"
+            paths:
+              - path: /
+                pathType: Prefix
+                service:
+                  name: main
+                  port: http
+        tls:
+          - hosts:
+              - *ts
     persistence:
       config:
         enabled: true