diff --git a/chart/templates/public-ingress.yaml b/chart/templates/public-ingress.yaml
index f08bff0..94a6979 100644
--- a/chart/templates/public-ingress.yaml
+++ b/chart/templates/public-ingress.yaml
@@ -9,9 +9,10 @@ metadata:
     {{ toYaml . | nindent 4 }}
     {{- end }}
     traefik.ingress.kubernetes.io/router.pathmatcher: PathRegexp
+    traefik.ingress.kubernetes.io/router.middlewares: kube-system-crowdsec@kubernetescrd
 spec:
   rules:
-    - host: {{ (.Values.ingress.hosts | first).host }}
+    - host: {{ (.Values.ingress.hosts | first).host | replace ".lab" ".fr" }}
       http:
         paths:
           - path: /[^/]+
diff --git a/chart/values.yaml b/chart/values.yaml
index 441cf8f..6620325 100644
--- a/chart/values.yaml
+++ b/chart/values.yaml
@@ -49,7 +49,9 @@ ingress:
   annotations:
     traefik.ingress.kubernetes.io/router.entrypoints: websecure
     traefik.ingress.kubernetes.io/router.tls: "true"
-    cert-manager.io/cluster-issuer: step-ca
+    cert-manager.io/issuer: step-ca
+    cert-manager.io/issuer-kind: StepClusterIssuer
+    cert-manager.io/issuer-group: certmanager.step.sm
     traefik.ingress.kubernetes.io/router.middlewares: localIp@file
   tls:
     - secretName: url-arcodange-lab-tls