diff --git a/system/traefik/templates/cert.yaml b/system/traefik/templates/cert.yaml
index 0b3abd4..12d410e 100644
--- a/system/traefik/templates/cert.yaml
+++ b/system/traefik/templates/cert.yaml
@@ -8,7 +8,7 @@ spec:
   issuerRef:
     name: lets-encrypt-dns01-production-cf
     kind: ClusterIssuer
-  commonName: '<secret:private-domain>'
+  commonName: '{{ .Values.traefik.domain }}'
   dnsNames:
-    - '<secret:private-domain>'
-    - '*.<secret:private-domain>'
+    - '{{ .Values.traefik.domain }}'
+    - '*.{{ .Values.traefik.domain }}'
diff --git a/system/traefik/templates/dashboard.yaml b/system/traefik/templates/dashboard.yaml
index 5dbe15a..ec84fcb 100644
--- a/system/traefik/templates/dashboard.yaml
+++ b/system/traefik/templates/dashboard.yaml
@@ -9,7 +9,7 @@ spec:
   entryPoints:
     - websecure
   routes:
-    - match: Host(`traefik.<secret:private-domain>`) && (PathPrefix(`/dashboard`) || PathPrefix(`/api`))
+    - match: Host(`traefik.{{ .Values.traefik.domain }}`) && (PathPrefix(`/dashboard`) || PathPrefix(`/api`))
       kind: Rule
       services:
         - name: api@internal
diff --git a/system/traefik/values.yaml b/system/traefik/values.yaml
index 4dc90f8..c7115b3 100644
--- a/system/traefik/values.yaml
+++ b/system/traefik/values.yaml
@@ -1,5 +1,6 @@
 ---
 traefik:
+  domain: int.nc.landry.land
   ports:
     web:
       redirectTo:
@@ -8,10 +9,10 @@ traefik:
   # Options for the main traefik service, where the entrypoints traffic comes
   # from.
   service:
-    annotations: {
-      metallb.universe.tf/loadBalancerIPs: "192.168.48.21"
-    }
-    single: false
+    # annotations: {
+    #   metallb.universe.tf/loadBalancerIPs: "192.168.48.21"
+    # }
+    # single: false
 
   tlsStore:
     default:
@@ -23,7 +24,7 @@ traefik:
 
   ingressRoute:
     dashboard:
-      enabled: false
+      enabled: true
 
   providers:
     kubernetesCRD: