diff --git a/.github/workflows/apply-kubernetes.yml b/.github/workflows/apply-kubernetes.yml
index 1346b80..2dacc42 100644
--- a/.github/workflows/apply-kubernetes.yml
+++ b/.github/workflows/apply-kubernetes.yml
@@ -31,5 +31,6 @@ jobs:
         run: |
           kubectl apply -f kubernetes/ingress
           kubectl apply -f kubernetes/proxy-ingress
-          
-          kubectl annotate ingressclass nginx ingressclass.kubernetes.io/is-default-class=true
\ No newline at end of file
+
+          kubectl annotate ingressclass nginx \
+            ingressclass.kubernetes.io/is-default-class="true" --overwrite
diff --git a/home-server/nginx.conf b/home-server/nginx.conf
index f4cb29b..48d92bd 100644
--- a/home-server/nginx.conf
+++ b/home-server/nginx.conf
@@ -55,18 +55,6 @@ server {
     }
 }
 
-server {
-    listen 443 ssl;
-    listen [::]:443 ssl;
-    server_name plex.alexmickelson.guru;
-
-    location / {
-        proxy_pass http://host.docker.internal:32400;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-    }
-}
-
 server {
     listen 443 ssl;
     listen [::]:443 ssl;
diff --git a/kubernetes/proxy-ingress/copilot-proxy-ingress.yml b/kubernetes/proxy-ingress/copilot-proxy-ingress.yml
new file mode 100644
index 0000000..0e5224a
--- /dev/null
+++ b/kubernetes/proxy-ingress/copilot-proxy-ingress.yml
@@ -0,0 +1,33 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: copilot-ingress
+  namespace: projects
+  annotations:
+    cert-manager.io/cluster-issuer: cloudflare-issuer
+spec:
+  ingressClassName: nginx
+  tls:
+  - hosts: 
+    - copilot.alexmickelson.guru
+    secretName: copilot-tls-cert
+  rules:
+  - host: copilot.alexmickelson.guru
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: copilot-service
+            port:
+              number: 4444
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: copilot-service
+  namespace: projects
+spec:
+  type: ExternalName
+  externalName: 100.122.128.107