diff --git a/media/static-file.yaml b/media/static-file.yaml
index a499906..690a743 100644
--- a/media/static-file.yaml
+++ b/media/static-file.yaml
@@ -99,3 +99,32 @@ spec:
               number: 80
         path: /
         pathType: Prefix
+
+---
+
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: public-static-file-ingress
+  annotations:
+    kubernetes.io/ingress.class: "nginx"
+    kubernetes.io/tls-acme: "true"
+    cert-manager.io/cluster-issuer: "letsencrypt-prod"
+    nginx.ingress.kubernetes.io/auth-url: "https://id.junv.me/oauth2/auth"
+    nginx.ingress.kubernetes.io/auth-signin: "https://id.junv.me/oauth2/start?rd=https%3A%2F%2F$host$request_uri"
+spec:
+  tls:
+  - hosts:
+    - xm.junv.me
+    secretName: public-static-file-tls-new
+  rules:
+  - host: xm.junv.me
+    http:
+      paths:
+      - backend:
+          service:
+            name: static-file-server
+            port:
+              number: 80
+        path: /
+        pathType: Prefix