diff --git a/cluster/apps/charts/authentik-chart.yaml b/cluster/apps/charts/authentik-chart.yaml
new file mode 100644
index 0000000..2a32e95
--- /dev/null
+++ b/cluster/apps/charts/authentik-chart.yaml
@@ -0,0 +1,9 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: authentik-chart
+  namespace: flux-system
+spec:
+  interval: 1h
+  url: https://charts.goauthentik.io
\ No newline at end of file
diff --git a/cluster/apps/staging/authentik/release.yaml b/cluster/apps/staging/authentik/authentik/helmrelease.yaml
similarity index 59%
rename from cluster/apps/staging/authentik/release.yaml
rename to cluster/apps/staging/authentik/authentik/helmrelease.yaml
index ef6b88b..9b85abe 100644
--- a/cluster/apps/staging/authentik/release.yaml
+++ b/cluster/apps/staging/authentik/authentik/helmrelease.yaml
@@ -1,15 +1,17 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
 kind: HelmRelease
 metadata:
   name: authentik
   namespace: default
 spec:
-  interval: 5m
+  interval: 15m
   chart:
     spec:
       chart: authentik
+      version: "2024.6.0"
       sourceRef:
         kind: HelmRepository
-        name: authentik
+        name: authentik-chart
         namespace: flux-system
-      interval: 1m
\ No newline at end of file
+      interval: 15m
\ No newline at end of file
diff --git a/cluster/apps/staging/authentik/authentik/ingress.yaml b/cluster/apps/staging/authentik/authentik/ingress.yaml
new file mode 100644
index 0000000..c78b1cc
--- /dev/null
+++ b/cluster/apps/staging/authentik/authentik/ingress.yaml
@@ -0,0 +1,21 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: authentik-pub
+  namespace: default
+  annotations:
+    kubernetes.io/ingress.class: "traefik-external" 
+    traefik.ingress.kubernetes.io/router.entrypoints: web  
+    traefik.ingress.kubernetes.io/router.middlewares: default-headers@kubernetescrd
+spec:
+  rules:
+    - host: auth.${PUBLIC_DOMAIN}
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: authentik
+                port:
+                  number: 6767
diff --git a/cluster/apps/staging/authentik/authentik/kustomization.yaml b/cluster/apps/staging/authentik/authentik/kustomization.yaml
new file mode 100644
index 0000000..a2474c6
--- /dev/null
+++ b/cluster/apps/staging/authentik/authentik/kustomization.yaml
@@ -0,0 +1,6 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - helmrelease.yaml
+  - ingress.yaml
\ No newline at end of file
diff --git a/cluster/apps/staging/authentik/kustomization.yaml b/cluster/apps/staging/authentik/kustomization.yaml
new file mode 100644
index 0000000..8885a9f
--- /dev/null
+++ b/cluster/apps/staging/authentik/kustomization.yaml
@@ -0,0 +1,5 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - authentik
\ No newline at end of file
diff --git a/cluster/apps/staging/authentik/repository.yaml b/cluster/apps/staging/authentik/repository.yaml
deleted file mode 100644
index 7af8349..0000000
--- a/cluster/apps/staging/authentik/repository.yaml
+++ /dev/null
@@ -1,8 +0,0 @@
-apiVersion: source.toolkit.fluxcd.io/v1
-kind: GitRepository
-metadata:
-  name: authentik
-  namespace: default
-spec:
-  interval: 5m
-  url: https://github.com/goauthentik/helm
\ No newline at end of file