diff --git a/cert-manager/prod-cluster-issuer.yaml b/cert-manager/prod-cluster-issuer.yaml
index b0f6adb..4001db2 100644
--- a/cert-manager/prod-cluster-issuer.yaml
+++ b/cert-manager/prod-cluster-issuer.yaml
@@ -14,5 +14,8 @@ spec:
     # Enable the HTTP-01 challenge provider
     solvers:
       - http01:
-          ingress:
-            ingressClassName: nginx
\ No newline at end of file
+          gatewayHTTPRoute:
+            parentRefs:
+              - name: homelab
+                namespace: envoy-gateway-system
+                sectionName: http
diff --git a/gateway/envoyproxy.yaml b/gateway/envoyproxy.yaml
index b12a18c..e95d2cb 100644
--- a/gateway/envoyproxy.yaml
+++ b/gateway/envoyproxy.yaml
@@ -1,9 +1,7 @@
 # How Envoy Gateway runs the proxy: a DaemonSet that takes the node's ports
-# directly, the way the microk8s ingress-nginx addon does. Gateway listeners
-# below 1024 run on port + 10000 inside the container (80 becomes 10080).
-#
-# While ingress-nginx still owns 80 and 443, the host ports are 10080 and
-# 10443 so both can be tested side by side.
+# 80 and 443 directly, the way the microk8s ingress-nginx addon did. Gateway
+# listeners below 1024 run on port + 10000 inside the container (80 becomes
+# 10080).
 apiVersion: gateway.envoyproxy.io/v1alpha1
 kind: EnvoyProxy
 metadata:
@@ -27,6 +25,6 @@ spec:
                   - name: envoy
                     ports:
                     - containerPort: 10080
-                      hostPort: 10080
+                      hostPort: 80
                     - containerPort: 10443
-                      hostPort: 10443
+                      hostPort: 443