diff --git a/kubernetes/apps/kube-system/cilium/app/helmrelease.yaml b/kubernetes/apps/kube-system/cilium/app/helmrelease.yaml
index 860d20154..9a5d60ead 100644
--- a/kubernetes/apps/kube-system/cilium/app/helmrelease.yaml
+++ b/kubernetes/apps/kube-system/cilium/app/helmrelease.yaml
@@ -4,7 +4,7 @@ apiVersion: helm.toolkit.fluxcd.io/v2beta1
 kind: HelmRelease
 metadata:
   name: &app cilium
-  namespace: kube-system
+  namespace: &ns kube-system
 spec:
   interval: 30m
   chart:
@@ -82,12 +82,12 @@ spec:
     securityContext:
       privileged: true
     tunnel: disabled
-  #   l7proxy: true
-  #   ingressController:
-  #     enabled: true
-  #     loadbalancerMode: shared
-  #     service:
-  #       loadBalancerIP: "${CLUSTER_LB_CILIUM}"
+    l7proxy: true
+    ingressController:
+      enabled: true
+      loadbalancerMode: shared
+      service:
+        loadBalancerIP: "${CLUSTER_LB_CILIUM}"
   # postRenderers:
   #   - kustomize:
   #       patchesStrategicMerge:
diff --git a/kubernetes/flux/vars/cluster-settings.yaml b/kubernetes/flux/vars/cluster-settings.yaml
index 530a50c3c..de5375b98 100644
--- a/kubernetes/flux/vars/cluster-settings.yaml
+++ b/kubernetes/flux/vars/cluster-settings.yaml
@@ -22,6 +22,7 @@ data:
   CLUSTER_LB_MAILRISE: 192.168.169.112
   CLUSTER_LB_REDIS: 192.168.169.113
   CLUSTER_LB_FRIGATE: 192.168.169.114
+  CLUSTER_LB_CILIUM: 192.168.169.115
   LOCAL_LAN: 192.168.8.0/22
   LOCAL_LAN_OPNSENSE: 192.168.8.1
   LOCAL_LAN_TRUENAS: 192.168.9.10