diff --git a/ansible-5/roles/prod.k3s/defaults/main.yml b/ansible-5/roles/prod.k3s/defaults/main.yml
index a0a34e7..b343244 100644
--- a/ansible-5/roles/prod.k3s/defaults/main.yml
+++ b/ansible-5/roles/prod.k3s/defaults/main.yml
@@ -82,7 +82,7 @@ apps:
     namespace: nextcloud
 
   hello_world:
-    enabled: false
+    enabled: true
     namespace: default
     state: present
 
diff --git a/ansible-5/roles/prod.k3s/files/hello-world/deployment.yaml b/ansible-5/roles/prod.k3s/files/hello-world/deployment.yaml
index db423b6..f876784 100644
--- a/ansible-5/roles/prod.k3s/files/hello-world/deployment.yaml
+++ b/ansible-5/roles/prod.k3s/files/hello-world/deployment.yaml
@@ -8,7 +8,7 @@ spec:
   selector:
     matchLabels:
       app: hello-world
-  replicas: 3
+  replicas: 1
   template:
     metadata:
       labels:
diff --git a/ansible-5/roles/prod.k3s/files/hello-world/ingress.yaml b/ansible-5/roles/prod.k3s/files/hello-world/ingress.yaml
index b13fa6f..b396479 100644
--- a/ansible-5/roles/prod.k3s/files/hello-world/ingress.yaml
+++ b/ansible-5/roles/prod.k3s/files/hello-world/ingress.yaml
@@ -20,6 +20,16 @@ spec:
                 name: hello-world
                 port:
                   number: 80
+    - host: xai-corp.net
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: hello-world
+                port:
+                  number: 80
 
   tls: # < placing a host in the TLS config will determine what ends up in the cert's subjectAltNames
     - secretName: xai-corp-production-tls
diff --git a/ansible-5/roles/prod.k3s/tasks/deployments/hello-world.yaml b/ansible-5/roles/prod.k3s/tasks/deployments/hello-world.yaml
index 84c8677..6752f62 100644
--- a/ansible-5/roles/prod.k3s/tasks/deployments/hello-world.yaml
+++ b/ansible-5/roles/prod.k3s/tasks/deployments/hello-world.yaml
@@ -8,7 +8,7 @@
     definition: "{{ lookup('file', item) | from_yaml }}"
   loop:
     - hello-world/configmap.yaml
-#    - hello-world/ingress.yaml
+    - hello-world/ingress.yaml
     - hello-world/service.yaml
     - hello-world/deployment.yaml
   become: true
@@ -31,7 +31,8 @@
     - name: Install oauth2-proxy Release
       local_action:
         module: kubernetes.core.helm
-        release_state: "{{apps.hello_world.state}}"
+#        release_state: "{{apps.hello_world.state}}"
+        release_state: absent
         name: oauth2-proxy
         namespace: "{{apps.hello_world.namespace}}"
         create_namespace: yes