diff --git a/remodel/k8s/apps/homepage/stonegarden/deployment.yaml b/remodel/k8s/apps/homepage/stonegarden/deployment.yaml
index 0fd8203..9f4967f 100644
--- a/remodel/k8s/apps/homepage/stonegarden/deployment.yaml
+++ b/remodel/k8s/apps/homepage/stonegarden/deployment.yaml
@@ -3,8 +3,10 @@ kind: Deployment
 metadata:
   name: stonegarden
   namespace: stonegarden
+  labels:
+    app: stonegarden
 spec:
-  replicas: 1
+  replicas: 2
   selector:
     matchLabels:
       app: stonegarden
@@ -24,7 +26,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: stonegarden
-          image: registry.gitlab.com/vehagn/stonegarden:latest
+          image: registry.gitlab.com/vehagn/stonegarden
           imagePullPolicy: Always
           securityContext:
             allowPrivilegeEscalation: false
diff --git a/remodel/k8s/apps/homepage/stonegarden/kustomization.yaml b/remodel/k8s/apps/homepage/stonegarden/kustomization.yaml
index 53584db..a709b63 100644
--- a/remodel/k8s/apps/homepage/stonegarden/kustomization.yaml
+++ b/remodel/k8s/apps/homepage/stonegarden/kustomization.yaml
@@ -3,6 +3,6 @@ kind: Kustomization
 
 resources:
   - ns.yaml
-  - service.yaml
+  - svc.yaml
   - deployment.yaml
   - http-route.yaml
diff --git a/remodel/k8s/apps/homepage/stonegarden/service.yaml b/remodel/k8s/apps/homepage/stonegarden/svc.yaml
similarity index 100%
rename from remodel/k8s/apps/homepage/stonegarden/service.yaml
rename to remodel/k8s/apps/homepage/stonegarden/svc.yaml
index 037aa84..33ab94b 100644
--- a/remodel/k8s/apps/homepage/stonegarden/service.yaml
+++ b/remodel/k8s/apps/homepage/stonegarden/svc.yaml
@@ -5,8 +5,8 @@ metadata:
   namespace: stonegarden
 spec:
   type: ClusterIP
+  selector:
+    app: stonegarden
   ports:
     - name: web
       port: 3000
-  selector:
-    app: stonegarden
diff --git a/remodel/k8s/infra/network/gateway/gw-stonegarden.yaml b/remodel/k8s/infra/network/gateway/gw-stonegarden.yaml
index f56ed8a..3d895b6 100644
--- a/remodel/k8s/infra/network/gateway/gw-stonegarden.yaml
+++ b/remodel/k8s/infra/network/gateway/gw-stonegarden.yaml
@@ -22,3 +22,14 @@ spec:
       allowedRoutes:
         namespaces:
           from: All
+    - protocol: HTTPS
+      port: 443
+      name: https-domain-gateway
+      hostname: stonegarden.dev
+      tls:
+        certificateRefs:
+          - kind: Secret
+            name: cloudflare-cert
+      allowedRoutes:
+        namespaces:
+          from: All