diff --git a/.gitignore b/.gitignore
index c639ce9..26cb3d1 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,4 +1,5 @@
 temp.yaml
+test.yaml
 **/.terraform
 *.tar.gz
 
diff --git a/home-apps/home.yaml b/home-apps/home.yaml
index 75f5515..56fbc12 100644
--- a/home-apps/home.yaml
+++ b/home-apps/home.yaml
@@ -40,19 +40,6 @@ spec:
               memory: 128Mi
 ---
 
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
-metadata:
-  name: auth
-  namespace: home-apps
-spec:
-  forwardAuth:
-    address: "https://passkey.junv.cc/auth"
-    authResponseHeaders:
-      - "X-Forwarded-User"
-    trustForwardHeader: true
----
-
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
@@ -60,7 +47,7 @@ metadata:
   namespace: home-apps
   annotations:
     cert-manager.io/cluster-issuer: "letsencrypt-prod"
-    traefik.ingress.kubernetes.io/router.middlewares: "home-apps-auth@kubernetescrd"
+    traefik.ingress.kubernetes.io/router.middlewares: "traefik-middleware-global-auth@kubernetescrd"
 spec:
   ingressClassName: traefik
   tls:
diff --git a/traefik-middleware/global-auth.yaml b/traefik-middleware/global-auth.yaml
new file mode 100644
index 0000000..64422a4
--- /dev/null
+++ b/traefik-middleware/global-auth.yaml
@@ -0,0 +1,11 @@
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: global-auth
+  namespace: traefik-middleware
+spec:
+  forwardAuth:
+    address: "https://pass.junv.cc/auth"
+    authResponseHeaders:
+      - "X-Forwarded-User"
+    trustForwardHeader: true
diff --git a/traefik-middleware/https-redirect.yaml b/traefik-middleware/https-redirect.yaml
new file mode 100644
index 0000000..edc0fcd
--- /dev/null
+++ b/traefik-middleware/https-redirect.yaml
@@ -0,0 +1,9 @@
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: https-redirect
+  namespace: traefik-middleware
+spec:
+  redirectScheme:
+    scheme: https
+    permanent: true