diff --git a/services/windmill/windmill-deployment.yaml b/services/windmill/windmill-deployment.yaml
index 20a378c..29c2b2e 100644
--- a/services/windmill/windmill-deployment.yaml
+++ b/services/windmill/windmill-deployment.yaml
@@ -25,7 +25,7 @@ spec:
             - name: MODE
               value: "standalone"
             - name: BASE_URL
-              value: "http://windmill.k3s.home.nest"
+              value: "https://murmuration.mynest.love"
             - name: DATABASE_URL
               valueFrom:
                 secretKeyRef:
diff --git a/services/windmill/windmill-ingress.yaml b/services/windmill/windmill-ingress.yaml
index c7866fe..47d3ea6 100644
--- a/services/windmill/windmill-ingress.yaml
+++ b/services/windmill/windmill-ingress.yaml
@@ -3,10 +3,15 @@ kind: Ingress
 metadata:
   name: windmill-ingress
   annotations:
-    traefik.ingress.kubernetes.io/router.entrypoints: web
+    cert-manager.io/cluster-issuer: "letsencrypt-prod"
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
 spec:
+  tls:
+  - hosts:
+    - murmuration.mynest.love
+    secretName: windmill-tls
   rules:
-    - host: windmill.k3s.home.nest
+    - host: murmuration.mynest.love
       http:
         paths:
           - path: /