diff --git a/clusters/cl01tl/applications/jellyfin/values.yaml b/clusters/cl01tl/applications/jellyfin/values.yaml
index 2dbdf36d9..83aff5164 100644
--- a/clusters/cl01tl/applications/jellyfin/values.yaml
+++ b/clusters/cl01tl/applications/jellyfin/values.yaml
@@ -51,6 +51,25 @@ jellyfin:
       tls:
         - hosts:
             - jellyfin-cl01tl
+    treafik:
+      enabled: true
+      className: treafik
+      annotations:
+        traefik.ingress.kubernetes.io/router.entrypoints: websecure
+        traefik.ingress.kubernetes.io/router.tls: "true"
+        cert-manager.io/cluster-issuer: letsencrypt-issuer
+      hosts:
+        - host: jellyfin.alexlebens.net
+          paths:
+            - path: /
+              pathType: Prefix
+              service:
+                name: jellyfin
+                port: 80
+      tls:
+        - hosts:
+            - jellyfin.alexlebens.net
+          secretName: jellyfin-tls-secret
   persistence:
     config:
       storageClass: ceph-block
diff --git a/clusters/cl01tl/applications/plex/values.yaml b/clusters/cl01tl/applications/plex/values.yaml
index 788537f9d..f2fc7d8aa 100644
--- a/clusters/cl01tl/applications/plex/values.yaml
+++ b/clusters/cl01tl/applications/plex/values.yaml
@@ -57,6 +57,25 @@ plex:
       tls:
         - hosts:
             - plex-cl01tl
+    treafik:
+      enabled: true
+      className: treafik
+      annotations:
+        traefik.ingress.kubernetes.io/router.entrypoints: websecure
+        traefik.ingress.kubernetes.io/router.tls: "true"
+        cert-manager.io/cluster-issuer: letsencrypt-issuer
+      hosts:
+        - host: plex.alexlebens.net
+          paths:
+            - path: /
+              pathType: Prefix
+              service:
+                name: plex-main
+                port: 32400
+      tls:
+        - hosts:
+            - plex.alexlebens.net
+          secretName: plex-tls-secret
   persistence:
     config:
       storageClass: ceph-block
diff --git a/clusters/cl01tl/services/blocky/values.yaml b/clusters/cl01tl/services/blocky/values.yaml
index 545b1cdca..2763a4c1e 100644
--- a/clusters/cl01tl/services/blocky/values.yaml
+++ b/clusters/cl01tl/services/blocky/values.yaml
@@ -107,6 +107,8 @@ blocky:
               gitea                           IN      CNAME   cl01tl-endpoint
               harbor                          IN      CNAME   cl01tl-endpoint
               vault                           IN      CNAME   cl01tl-endpoint
+              plex                            IN      CNAME   cl01tl-endpoint
+              jellyfin                        IN      CNAME   cl01tl-endpoint
 
           blocking:
             denylists:
diff --git a/hosts/ps08rp/blocky/config.yml b/hosts/ps08rp/blocky/config.yml
index 40e3d304c..7e9393121 100644
--- a/hosts/ps08rp/blocky/config.yml
+++ b/hosts/ps08rp/blocky/config.yml
@@ -80,6 +80,8 @@ customDNS:
     gitea                           IN      CNAME   cl01tl-endpoint
     harbor                          IN      CNAME   cl01tl-endpoint
     vault                           IN      CNAME   cl01tl-endpoint
+    plex                            IN      CNAME   cl01tl-endpoint
+    jellyfin                        IN      CNAME   cl01tl-endpoint
 
 blocking:
   denylists:
diff --git a/hosts/ps09rp/blocky/config.yml b/hosts/ps09rp/blocky/config.yml
index 40e3d304c..7e9393121 100644
--- a/hosts/ps09rp/blocky/config.yml
+++ b/hosts/ps09rp/blocky/config.yml
@@ -80,6 +80,8 @@ customDNS:
     gitea                           IN      CNAME   cl01tl-endpoint
     harbor                          IN      CNAME   cl01tl-endpoint
     vault                           IN      CNAME   cl01tl-endpoint
+    plex                            IN      CNAME   cl01tl-endpoint
+    jellyfin                        IN      CNAME   cl01tl-endpoint
 
 blocking:
   denylists: