diff --git a/kubernetes/apps/default/jellyfin/app/helmrelease.yaml b/kubernetes/apps/default/jellyfin/app/helmrelease.yaml
index 8acd2cd8..d87a2951 100644
--- a/kubernetes/apps/default/jellyfin/app/helmrelease.yaml
+++ b/kubernetes/apps/default/jellyfin/app/helmrelease.yaml
@@ -96,6 +96,8 @@ spec:
         enabled: true
         className: external-nginx
         annotations:
+          external-dns.alpha.kubernetes.io/cloudflare-proxied: "true"
+          external-dns.alpha.kubernetes.io/target: external.hsn.dev
         hosts:
           - host: &host "jelly.hsn.dev"
             paths:
diff --git a/kubernetes/apps/flux-system/add-ons/webhooks/git/ingress.yaml b/kubernetes/apps/flux-system/add-ons/webhooks/git/ingress.yaml
index 1c6af951..8ede1132 100644
--- a/kubernetes/apps/flux-system/add-ons/webhooks/git/ingress.yaml
+++ b/kubernetes/apps/flux-system/add-ons/webhooks/git/ingress.yaml
@@ -6,6 +6,8 @@ metadata:
   namespace: flux-system
   annotations:
     external-dns.alpha.kubernetes.io/cloudflare-proxied: "true"
+    external-dns.alpha.kubernetes.io/target: external.hsn.dev
+
 spec:
   ingressClassName: external-nginx
   rules: