diff --git a/template/stacks/core/ingress-apps/argo-workflows-ingress.yaml b/template/stacks/core/ingress-apps/argo-workflows-ingress.yaml
index 71cead0..6b63a55 100644
--- a/template/stacks/core/ingress-apps/argo-workflows-ingress.yaml
+++ b/template/stacks/core/ingress-apps/argo-workflows-ingress.yaml
@@ -19,7 +19,7 @@ spec:
               name: web
         path: /argo-workflows(/|$)(.*)
         pathType: ImplementationSpecific
-  - host: cnoe.localtest.me
+  - host: {{{ .Env.DOMAIN }}}
     http:
       paths:
       - backend:
diff --git a/template/stacks/core/ingress-apps/argocd-server.yaml b/template/stacks/core/ingress-apps/argocd-server.yaml
index 10b4a3a..0446b6c 100644
--- a/template/stacks/core/ingress-apps/argocd-server.yaml
+++ b/template/stacks/core/ingress-apps/argocd-server.yaml
@@ -6,12 +6,17 @@ metadata:
     nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
     nginx.ingress.kubernetes.io/rewrite-target: /$2
     nginx.ingress.kubernetes.io/use-regex: "true"
+{{{ if eq .Env.CLUSTER_TYPE "osc" }}}
+    dns.gardener.cloud/class: garden
+    dns.gardener.cloud/dnsnames: {{{ .Env.DOMAIN }}}
+    dns.gardener.cloud/ttl: "600"
+{{{ end }}}
   name: argocd-server
   namespace: argocd
 spec:
   ingressClassName: nginx
   rules:
-  - host: cnoe.localtest.me
+  - host: {{{ .Env.DOMAIN }}}
     http:
       paths:
       - backend:
@@ -23,5 +28,5 @@ spec:
         pathType: ImplementationSpecific
   tls:
   - hosts:
-    - cnoe.localtest.me
+    - {{{ .Env.DOMAIN }}}
     secretName: argocd-net-tls
diff --git a/template/stacks/core/ingress-apps/backstage.yaml b/template/stacks/core/ingress-apps/backstage.yaml
index 7f44187..4eef936 100644
--- a/template/stacks/core/ingress-apps/backstage.yaml
+++ b/template/stacks/core/ingress-apps/backstage.yaml
@@ -16,7 +16,7 @@ spec:
               name: http
         path: /
         pathType: Prefix
-  - host: cnoe.localtest.me
+  - host: {{{ .Env.DOMAIN }}}
     http:
       paths:
       - backend:
diff --git a/template/stacks/core/ingress-apps/fibonacci-service.yaml b/template/stacks/core/ingress-apps/fibonacci-service.yaml
index c499226..622cceb 100644
--- a/template/stacks/core/ingress-apps/fibonacci-service.yaml
+++ b/template/stacks/core/ingress-apps/fibonacci-service.yaml
@@ -6,7 +6,7 @@ metadata:
 spec:
   ingressClassName: nginx
   rules:
-  - host: cnoe.localtest.me
+  - host: {{{ .Env.DOMAIN }}}
     http:
       paths:
       - backend:
diff --git a/template/stacks/core/ingress-apps/forgejo.yaml b/template/stacks/core/ingress-apps/forgejo.yaml
index f53b3ec..3143875 100644
--- a/template/stacks/core/ingress-apps/forgejo.yaml
+++ b/template/stacks/core/ingress-apps/forgejo.yaml
@@ -4,12 +4,17 @@ metadata:
   annotations:
     nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
     nginx.ingress.kubernetes.io/proxy-body-size: 512m
+{{{ if eq .Env.CLUSTER_TYPE "osc" }}}
+    dns.gardener.cloud/class: garden
+    dns.gardener.cloud/dnsnames: gitea.{{{ .Env.DOMAIN }}}
+    dns.gardener.cloud/ttl: "600"
+{{{ end }}}
   name: forgejo
   namespace: gitea
 spec:
   ingressClassName: nginx
   rules:
-  - host: gitea.cnoe.localtest.me
+  - host: gitea.{{{ .Env.DOMAIN }}}
     http:
       paths:
       - backend:
@@ -21,5 +26,5 @@ spec:
         pathType: Prefix
   tls:
   - hosts:
-    - gitea.cnoe.localtest.me
+    - gitea.{{{ .Env.DOMAIN }}}
     secretName: forgejo-net-tls
diff --git a/template/stacks/core/ingress-apps/keycloak-ingress-localhost.yaml b/template/stacks/core/ingress-apps/keycloak-ingress-localhost.yaml
index 16b20c3..4dcc41c 100644
--- a/template/stacks/core/ingress-apps/keycloak-ingress-localhost.yaml
+++ b/template/stacks/core/ingress-apps/keycloak-ingress-localhost.yaml
@@ -16,7 +16,7 @@ spec:
               name: http
         path: /keycloak
         pathType: ImplementationSpecific
-  - host: cnoe.localtest.me
+  - host: {{{ .Env.DOMAIN }}}
     http:
       paths:
       - backend:
diff --git a/template/stacks/core/ingress-apps/kube-prometheus-stack-grafana.yaml b/template/stacks/core/ingress-apps/kube-prometheus-stack-grafana.yaml
index 44c2b02..e60ebe7 100644
--- a/template/stacks/core/ingress-apps/kube-prometheus-stack-grafana.yaml
+++ b/template/stacks/core/ingress-apps/kube-prometheus-stack-grafana.yaml
@@ -6,7 +6,7 @@ metadata:
 spec:
   ingressClassName: nginx
   rules:
-  - host: cnoe.localtest.me
+  - host: {{{ .Env.DOMAIN }}}
     http:
       paths:
       - backend:
diff --git a/template/stacks/core/ingress-apps/minio-console.yaml b/template/stacks/core/ingress-apps/minio-console.yaml
index ffa909d..19e2452 100644
--- a/template/stacks/core/ingress-apps/minio-console.yaml
+++ b/template/stacks/core/ingress-apps/minio-console.yaml
@@ -3,10 +3,16 @@ kind: Ingress
 metadata:
   name: minio-console
   namespace: minio-backup
+{{{ if eq .Env.CLUSTER_TYPE "osc" }}}
+  annotations:
+    dns.gardener.cloud/class: garden
+    dns.gardener.cloud/dnsnames: minio-backup.{{{ .Env.DOMAIN }}}
+    dns.gardener.cloud/ttl: "600"
+{{{ end }}}
 spec:
   ingressClassName: nginx
   rules:
-  - host: minio-backup.cnoe.localtest.me
+  - host: minio-backup.{{{ .Env.DOMAIN }}}
     http:
       paths:
       - backend:
diff --git a/template/stacks/core/ingress-apps/openbao.yaml b/template/stacks/core/ingress-apps/openbao.yaml
index bb00b92..26b379f 100644
--- a/template/stacks/core/ingress-apps/openbao.yaml
+++ b/template/stacks/core/ingress-apps/openbao.yaml
@@ -3,10 +3,16 @@ kind: Ingress
 metadata:
   name: openbao
   namespace: openbao
+{{{ if eq .Env.CLUSTER_TYPE "osc" }}}
+  annotations:
+    dns.gardener.cloud/class: garden
+    dns.gardener.cloud/dnsnames: openbao.{{{ .Env.DOMAIN }}}
+    dns.gardener.cloud/ttl: "600"
+{{{ end }}}
 spec:
   ingressClassName: nginx
   rules:
-  - host: openbao.cnoe.localtest.me
+  - host: openbao.{{{ .Env.DOMAIN }}}
     http:
       paths:
       - backend: