diff --git a/k8s/base/ingress.yaml b/k8s/base/ingress.yaml
index 2ad0301..4707230 100644
--- a/k8s/base/ingress.yaml
+++ b/k8s/base/ingress.yaml
@@ -3,7 +3,8 @@ kind: Ingress
 metadata:
   name: books
   annotations:
-    cert-manager.io/cluster-issuer: letsencrypt-prod
+    cert-manager.io/cluster-issuer: letsencrypt
+    traefik.ingress.kubernetes.io/router.middlewares: books-redirect-to-https@kubernetescrd
 spec:
   ingressClassName: traefik
   tls:
diff --git a/k8s/base/kustomization.yaml b/k8s/base/kustomization.yaml
index 7c99920..2224494 100644
--- a/k8s/base/kustomization.yaml
+++ b/k8s/base/kustomization.yaml
@@ -5,6 +5,7 @@ resources:
   - deployment.yaml
   - service.yaml
   - ingress.yaml
+  - middleware.yaml
 
 labels:
   - pairs:
diff --git a/k8s/base/middleware.yaml b/k8s/base/middleware.yaml
new file mode 100644
index 0000000..9c72504
--- /dev/null
+++ b/k8s/base/middleware.yaml
@@ -0,0 +1,8 @@
+apiVersion: traefik.containo.us/v1alpha1
+kind: Middleware
+metadata:
+  name: redirect-to-https
+spec:
+  redirectScheme:
+    permanent: true
+    scheme: https