diff --git a/ente-photos/ente-deployment.yaml b/ente-photos/ente-deployment.yaml
index 158770b..73f965b 100644
--- a/ente-photos/ente-deployment.yaml
+++ b/ente-photos/ente-deployment.yaml
@@ -29,6 +29,21 @@ spec:
               secretKeyRef:
                 name: ente-photos-config
                 key: pgpass
+          - name: ENTE_S3_ARE_LOCAL_BUCKETS
+            value: "false"
+          - name: ENTE_S3_ENTE-PHOTOS_KEY
+            value: "ente-photos-user"
+          - name: ENTE_S3_ENTE-PHOTOS_SECRET
+            valueFrom:
+              secretKeyRef:
+                name: ente-photos-config
+                key: miniopass
+          - name: ENTE_S3_ENTE-PHOTOS_ENDPOINT
+            value: "minio.hensen.io:3200"
+          - name: ENTE_S3_ENTE-PHOTOS_REGION
+            value: "nl"
+          - name: ENTE_S3_ENTE-PHOTOS_BUCKET
+            value: "ente-photos"
           image: ghcr.io/ente-io/server
           name: museum
           # command: [ "sh", "-c"]
diff --git a/ente-photos/ente-ingress.yaml b/ente-photos/ente-ingress.yaml
new file mode 100644
index 0000000..f9a44ac
--- /dev/null
+++ b/ente-photos/ente-ingress.yaml
@@ -0,0 +1,33 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: ente-server-ingress
+  annotations:
+    # nginx.ingress.kubernetes.io/rewrite-target: /
+    cert-manager.io/cluster-issuer: prod-cluster-issuer
+    nginx.ingress.kubernetes.io/ssl-passthrough: "true"
+    # If you encounter a redirect loop or are getting a 307 response code
+    # then you need to force the nginx ingress to connect to the backend using HTTPS.
+    #
+    nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
+  namespace: ente-photos
+spec:
+  ingressClassName: nginx
+  rules:
+  - host: argocd.hensen.io
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: ente-service
+            port: 
+              name: "8080"
+            
+  # TLS configuration for HTTPS
+  tls:
+    # TLS secretName used on ClusterIssuer
+    - secretName:  letsencrypt-prod
+      hosts:
+        - ente-server.hensen.io
\ No newline at end of file
diff --git a/ente-photos/museum-service.yaml b/ente-photos/museum-service.yaml
index 86225f0..11185a7 100644
--- a/ente-photos/museum-service.yaml
+++ b/ente-photos/museum-service.yaml
@@ -1,7 +1,7 @@
 apiVersion: v1
 kind: Service
 metadata:
-  name: museum
+  name: ente-service
 spec:
   selector:
     app: ente