diff --git a/Kubernetes/Traefik-External-Service/default-headers.yaml b/Kubernetes/Traefik-External-Service/default-headers.yaml
new file mode 100644
index 0000000..32a85bd
--- /dev/null
+++ b/Kubernetes/Traefik-External-Service/default-headers.yaml
@@ -0,0 +1,16 @@
+apiVersion: traefik.containo.us/v1alpha1
+kind: Middleware
+metadata:
+  name: default-headers
+  namespace: default
+spec:
+  headers:
+    browserXssFilter: true
+    contentTypeNosniff: true
+    forceSTSHeader: true
+    stsIncludeSubdomains: true
+    stsPreload: true
+    stsSeconds: 15552000
+    customFrameOptionsValue: SAMEORIGIN
+    customRequestHeaders:
+      X-Forwarded-Proto: https
\ No newline at end of file
diff --git a/Kubernetes/Traefik-External-Service/ingress.yaml b/Kubernetes/Traefik-External-Service/ingress.yaml
new file mode 100644
index 0000000..2594e29
--- /dev/null
+++ b/Kubernetes/Traefik-External-Service/ingress.yaml
@@ -0,0 +1,30 @@
+---
+apiVersion: traefik.containo.us/v1alpha1
+kind: IngressRoute
+metadata:
+  name: proxmox
+  namespace: default
+  annotations: 
+    kubernetes.io/ingress.class: traefik-external
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`www.proxmox.jimsgarage.co.uk`)
+      kind: Rule
+      services:
+        - name: proxmox
+          port: 8006
+          scheme: https
+          passHostHeader: true
+    - match: Host(`proxmox.jimsgarage.co.uk`)
+      kind: Rule
+      services:
+        - name: proxmox
+          port: 8006
+          scheme: https
+          passHostHeader: true
+      middlewares:
+        - name: default-headers
+  tls:
+    secretName: jimsgarage-tls
diff --git a/Kubernetes/Traefik-External-Service/service.yaml b/Kubernetes/Traefik-External-Service/service.yaml
new file mode 100644
index 0000000..2de0c96
--- /dev/null
+++ b/Kubernetes/Traefik-External-Service/service.yaml
@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: proxmox
+  namespace: default
+spec:
+  externalName: 192.168.200.75
+  type: ExternalName
+  ports:
+  - name: websecure
+    port: 8006
+    targetPort: 8006
\ No newline at end of file