diff --git a/curaflow/k8s/apisix-route.yaml b/curaflow/k8s/apisix-route.yaml
deleted file mode 100644
index b8e14d1..0000000
--- a/curaflow/k8s/apisix-route.yaml
+++ /dev/null
@@ -1,16 +0,0 @@
-apiVersion: apisix.apache.org/v2
-kind: ApisixRoute
-metadata:
-  name: curaflow-route
-  namespace: curaflow
-spec:
-  http:
-  - name: curaflow-rule
-    match:
-      hosts:
-      - curaflow.applaude.net
-      paths:
-      - /*
-    backends:
-    - serviceName: curaflow-app
-      servicePort: 80
diff --git a/curaflow/k8s/app.yaml b/curaflow/k8s/app.yaml
index 1e84ed5..4fdebdb 100644
--- a/curaflow/k8s/app.yaml
+++ b/curaflow/k8s/app.yaml
@@ -31,3 +31,29 @@ spec:
   ports:
   - port: 80
     targetPort: 3000
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: curaflow-ingress
+  namespace: curaflow
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+    k8s.apisix.apache.org/enable-websocket: "true"
+spec:
+  ingressClassName: apisix
+  tls:
+  - hosts:
+    - curaflow.applaude.net
+    secretName: curaflow-tls
+  rules:
+  - host: curaflow.applaude.net
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: curaflow-app
+            port:
+              number: 80
diff --git a/platform/bootstrap/namespaces.yaml b/platform/bootstrap/namespaces.yaml
index b8e40e4..24399c4 100644
--- a/platform/bootstrap/namespaces.yaml
+++ b/platform/bootstrap/namespaces.yaml
@@ -62,3 +62,11 @@ metadata:
   name: interface
   labels:
     agentic-os.io/layer: "interface"
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: curaflow
+  labels:
+    agentic-os.io/layer: "interface"
+    agentic-os.io/app: "curaflow"