diff --git a/cluster/apps/home/home-assistant/helm-release.yaml b/cluster/apps/home/home-assistant/helm-release.yaml
index 16e612520..8957988f2 100644
--- a/cluster/apps/home/home-assistant/helm-release.yaml
+++ b/cluster/apps/home/home-assistant/helm-release.yaml
@@ -84,6 +84,8 @@ spec:
           enabled: true
           annotations:
             kubernetes.io/ingress.class: "nginx"
+            nginx.ingress.kubernetes.io/auth-url: "http://authelia.networking.svc.cluster.local/api/verify"
+            nginx.ingress.kubernetes.io/auth-signin: "https://login.${SECRET_CLUSTER_DOMAIN}/"
           hosts:
             - host: hass-config.${SECRET_CLUSTER_DOMAIN}
               paths:
diff --git a/cluster/apps/home/node-red/helm-release.yaml b/cluster/apps/home/node-red/helm-release.yaml
index b89642be4..95c78bca1 100644
--- a/cluster/apps/home/node-red/helm-release.yaml
+++ b/cluster/apps/home/node-red/helm-release.yaml
@@ -48,3 +48,34 @@ spec:
       tls:
         - hosts:
             - node-red.${SECRET_CLUSTER_DOMAIN}
+    addons:
+      codeserver:
+        enabled: true
+        image:
+          repository: codercom/code-server
+          tag: 3.9.3
+        workingDir: "/data/projects"
+        args:
+          - --auth
+          - "none"
+          - --user-data-dir
+          - "/data/projects/.vscode"
+          - --extensions-dir
+          - "/data/projects/.vscode"
+        ingress:
+          enabled: true
+          annotations:
+            kubernetes.io/ingress.class: "nginx"
+            nginx.ingress.kubernetes.io/auth-url: "http://authelia.networking.svc.cluster.local/api/verify"
+            nginx.ingress.kubernetes.io/auth-signin: "https://login.${SECRET_CLUSTER_DOMAIN}/"
+          hosts:
+            - host: node-red-config.${SECRET_CLUSTER_DOMAIN}
+              paths:
+                - path: /
+                  pathType: Prefix
+          tls:
+            - hosts:
+                - node-red-config.${SECRET_CLUSTER_DOMAIN}
+        volumeMounts:
+          - name: data
+            mountPath: /data