diff --git a/ansible/services/caddy/Caddyfile b/ansible/services/caddy/Caddyfile
index 26d3c9a..09abe5d 100644
--- a/ansible/services/caddy/Caddyfile
+++ b/ansible/services/caddy/Caddyfile
@@ -26,6 +26,16 @@ london-a.pez.sh {
         }
 }
 
+*.k8s.pez.sh {
+        tls {
+            dns hetzner {env.HETZNER_DNS_API_TOKEN}
+        }
+        tracing {
+                span k8s
+        }
+        reverse_proxy 100.123.97.26:80
+}
+
 ## LONDON-B SERVICES ##
 
 # Jellyfin
diff --git a/terraform/hetzner/dns.tf b/terraform/hetzner/dns.tf
index 76ba482..4ba0aec 100644
--- a/terraform/hetzner/dns.tf
+++ b/terraform/hetzner/dns.tf
@@ -14,7 +14,7 @@ locals {
 resource "hcloud_zone_rrset" "A_helsinki_a" {
   for_each = toset([
     "@", "apps", "auth", "bitwarden", "download", "git", "helsinki-a",
-    "jellyfin", "jellyfin-requests", "ldap", "lidarr", "london-a", "music", "naveen",
+    "jellyfin", "jellyfin-requests", "*.k8s", "ldap", "lidarr", "london-a", "music", "naveen",
     "n8n", "plex", "prowlarr", "radarr", "readarr", "request",
     "sonarr", "soulseek", "status",
   ])