diff --git a/infra/net-aux/config/cloudflared/config.yaml b/infra/net-aux/config/cloudflared/config.yaml
index 069181a..bea5d07 100644
--- a/infra/net-aux/config/cloudflared/config.yaml
+++ b/infra/net-aux/config/cloudflared/config.yaml
@@ -9,16 +9,22 @@ warp-routing:
 ingress:
   - hostname: hello.stonegarden.dev
     service: hello_world
-  - hostname: hei.stonegarden.dev
+  - hostname: hallo.stonegarden.dev
     service: hello_world
     originRequest:
       access:
         required: true
         teamName: stonegarden
+        audTag:
+          - aud1 d34ec64c62e56195ac6158dbfbeae62155d110f5c3a3b7e949572916dc57a6f3
   - hostname: ssh.stonegarden.dev
     service: ssh://192.168.1.12:22
   - hostname: stonegarden.dev
-    service: https://stonegarden.dev
+    service: https://traefik.traefik.svc.cluster.local:443
+    originRequest:
+      originServerName: stonegarden.dev
   - hostname: "*.stonegarden.dev"
-    service: https://stonegarden.dev
-  - service: http_status:404
\ No newline at end of file
+    service: https://traefik.traefik.svc.cluster.local:443
+    originRequest:
+      originServerName: stonegarden.dev
+  - service: http_status:404
diff --git a/infra/net-aux/deployment.yaml b/infra/net-aux/deployment.yaml
index a65dc10..9f85f08 100644
--- a/infra/net-aux/deployment.yaml
+++ b/infra/net-aux/deployment.yaml
@@ -20,7 +20,7 @@ spec:
       labels:
         app: net-aux
     spec:
-      dnsPolicy: None
+      dnsPolicy: ClusterFirst
       dnsConfig:
         nameservers:
           - 127.0.0.1