diff --git a/streaming/k8s/routing/certificates.yaml b/streaming/k8s/routing/certificates.yaml
index 2777176..e60953f 100644
--- a/streaming/k8s/routing/certificates.yaml
+++ b/streaming/k8s/routing/certificates.yaml
@@ -13,19 +13,32 @@ spec:
   issuerRef:
     name: internal-ca
     kind: ClusterIssuer
-# ---
-# apiVersion: cert-manager.io/v1
-# kind: Certificate
-# metadata:
-#   name: jellyfin-prod-tls
-#   namespace: streaming
-# spec:
-#   secretName: jellyfin-prod-tls
-#   dnsNames:
-#     - jellyfin.forust.xyz
-#   issuerRef:
-#     name: letsencrypt-prod
-#     kind: ClusterIssuer
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: jelly-prod-tls
+  namespace: streaming
+spec:
+  secretName: jelly-prod-tls
+  dnsNames:
+    - jelly.forust.xyz
+  issuerRef:
+    name: letsencrypt-prod
+    kind: ClusterIssuer
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: seerr-prod-tls
+  namespace: streaming
+spec:
+  secretName: seerr-prod-tls
+  dnsNames:
+    - seerr.forust.xyz
+  issuerRef:
+    name: letsencrypt-prod
+    kind: ClusterIssuer
 # ---
 # apiVersion: cert-manager.io/v1
 # kind: Certificate
@@ -78,16 +91,3 @@ spec:
 #   issuerRef:
 #     name: letsencrypt-prod
 #     kind: ClusterIssuer
-# ---
-# apiVersion: cert-manager.io/v1
-# kind: Certificate
-# metadata:
-#   name: jellyseerr-prod-tls
-#   namespace: streaming
-# spec:
-#   secretName: jellyseerr-prod-tls
-#   dnsNames:
-#     - jellyseerr.forust.xyz
-#   issuerRef:
-#     name: letsencrypt-prod
-#     kind: ClusterIssuer
diff --git a/streaming/k8s/routing/ingress.yaml b/streaming/k8s/routing/ingress.yaml
index 544e47d..18b782b 100644
--- a/streaming/k8s/routing/ingress.yaml
+++ b/streaming/k8s/routing/ingress.yaml
@@ -133,3 +133,37 @@ spec:
           port: 19118
   tls:
     secretName: internal-wildcard-tls
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: jellyfin-prod
+  namespace: streaming
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`jelly.forust.xyz`)
+      kind: Rule
+      services:
+        - name: jellyfin
+          port: 18096
+  tls:
+    secretName: jelly-prod-tls
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: seerr-prod
+  namespace: streaming
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`seerr.forust.xyz`)
+      kind: Rule
+      services:
+        - name: jellyseerr
+          port: 15055
+  tls:
+    secretName: seerr-prod-tls