diff --git a/template/stacks/observability/victoria-k8s-stack/values.yaml b/template/stacks/observability/victoria-k8s-stack/values.yaml
index 6e833c6..1933a2a 100644
--- a/template/stacks/observability/victoria-k8s-stack/values.yaml
+++ b/template/stacks/observability/victoria-k8s-stack/values.yaml
@@ -758,6 +758,15 @@ vmauth:
   # * `{{ .vm.write }}` - parsed vminsert, vmsingle or external.vm.write URL
   spec:
     port: "8427"
+    ingress:
+      class_name: nginx
+      annotations:
+        nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
+        cert-manager.io/cluster-issuer: main
+      host: o12y.penguin-observability.think-ahead.cloud
+      tlsHosts:
+        - o12y.penguin-observability.think-ahead.cloud
+      tlsSecretName: vmauth-tls-secret
     unauthorizedUserAccessSpec:
       # -- Flag, that allows to disable default VMAuth unauthorized user access config
       disabled: false