diff --git a/kubernetes/apps/observability/grafana/app/helmrelease.yaml b/kubernetes/apps/observability/grafana/app/helmrelease.yaml
index 7a9f2361..74d23584 100644
--- a/kubernetes/apps/observability/grafana/app/helmrelease.yaml
+++ b/kubernetes/apps/observability/grafana/app/helmrelease.yaml
@@ -333,6 +333,9 @@ spec:
     ingress:
       enabled: true
       ingressClassName: external-nginx
+      annotations:
+        external-dns.alpha.kubernetes.io/cloudflare-proxied: "true"
+        external-dns.alpha.kubernetes.io/target: external.hsn.dev
       hosts:
         - &host grafana.hsn.dev
       tls: