diff --git a/kube/deploy/apps/thelounge/app/hr.yaml b/kube/deploy/apps/thelounge/app/hr.yaml
index e3d47532..031f85d7 100644
--- a/kube/deploy/apps/thelounge/app/hr.yaml
+++ b/kube/deploy/apps/thelounge/app/hr.yaml
@@ -22,6 +22,7 @@ spec:
       replicas: 1
     podLabels:
       ingress.home.arpa/nginx: "allow"
+      authentik.home.arpa/ldap: "allow"
     image:
       repository: ghcr.io/thelounge/thelounge
       tag: 4.4.1