diff --git a/apps/gethomepage/base/auth.passwd b/apps/gethomepage/base/auth.passwd
new file mode 100644
index 0000000..ada5953
--- /dev/null
+++ b/apps/gethomepage/base/auth.passwd
@@ -0,0 +1 @@
+david:$apr1$BW4HLezv$jcSwJ3k6XbuRjkG3zWcnQ0
diff --git a/apps/gethomepage/base/ingress.yaml b/apps/gethomepage/base/ingress.yaml
index 9ca3006..f66e5b3 100644
--- a/apps/gethomepage/base/ingress.yaml
+++ b/apps/gethomepage/base/ingress.yaml
@@ -5,6 +5,9 @@ metadata:
   labels:
     app.kubernetes.io/name: homepage
   annotations:
+    nginx.ingress.kubernetes.io/auth-type: basic
+    nginx.ingress.kubernetes.io/auth-secret: basic-auth
+    nginx.ingress.kubernetes.io/auth-realm: "Authentication Required"
     cert-manager.io/cluster-issuer: letsencrypt-issuer
     gethomepage.dev/description: Dynamically Detected Homepage
     gethomepage.dev/enabled: "true"
diff --git a/apps/gethomepage/base/kustomization.yaml b/apps/gethomepage/base/kustomization.yaml
index 2f6365f..500d65c 100644
--- a/apps/gethomepage/base/kustomization.yaml
+++ b/apps/gethomepage/base/kustomization.yaml
@@ -8,3 +8,8 @@ resources:
   - sa.yaml
   - secret.yaml
   - service.yaml
+
+secretGenerator:
+  - name: basic-auth
+    files:
+      - auth=auth.passwd