diff --git a/apps/loki/ingress.yaml b/apps/loki/ingress.yaml
index fd2f49e..8d70da3 100644
--- a/apps/loki/ingress.yaml
+++ b/apps/loki/ingress.yaml
@@ -3,26 +3,13 @@ kind: Ingress
 metadata:
   name: loki
   namespace: loki
+  labels:
+    app.kubernetes.io/name: loki
   annotations:
-    # Traefik annotations
-    traefik.ingress.kubernetes.io/router.entrypoints: websecure
-    traefik.ingress.kubernetes.io/router.tls: "true"
-    
-    # Let's Encrypt TLS certificate
-    cert-manager.io/cluster-issuer: letsencrypt-prod
-    
-    # Basic authentication for security
-    # Generate password: htpasswd -nb admin your-password | base64
+    kubernetes.io/ingress.class: traefik
+    cert-manager.io/cluster-issuer: letsencrypt-http
     traefik.ingress.kubernetes.io/router.middlewares: loki-basic-auth@kubernetescrd
-    
-    # Additional headers for Loki
-    traefik.ingress.kubernetes.io/custom-request-headers: "X-Scope-OrgID:tenant1"
 spec:
-  ingressClassName: traefik
-  tls:
-    - hosts:
-        - loki.thedevops.dev
-      secretName: loki-tls
   rules:
     - host: loki.thedevops.dev
       http:
@@ -34,3 +21,7 @@ spec:
                 name: loki
                 port:
                   number: 3100
+  tls:
+    - hosts:
+        - loki.thedevops.dev
+      secretName: loki-tls