diff --git a/kubernetes/apps/home-assistant/ingress.yaml b/kubernetes/apps/home-assistant/ingress.yaml
index 95671687..871a0568 100644
--- a/kubernetes/apps/home-assistant/ingress.yaml
+++ b/kubernetes/apps/home-assistant/ingress.yaml
@@ -10,7 +10,7 @@ metadata:
     nginx.ingress.kubernetes.io/proxy-read-timeout: "3600"
     nginx.ingress.kubernetes.io/proxy-send-timeout: "3600"
 spec:
-  ingressClassName: nginx
+  ingressClassName: traefik
   rules:
     - host: home.renner.uno
       http:
diff --git a/kubernetes/apps/home-assistant/vscode-ingress.yaml b/kubernetes/apps/home-assistant/vscode-ingress.yaml
index c1abe5b1..c90535db 100644
--- a/kubernetes/apps/home-assistant/vscode-ingress.yaml
+++ b/kubernetes/apps/home-assistant/vscode-ingress.yaml
@@ -9,7 +9,7 @@ metadata:
     nginx.ingress.kubernetes.io/proxy-send-timeout: "3600"
     nginx.ingress.kubernetes.io/proxy-buffering: "off"
 spec:
-  ingressClassName: nginx
+  ingressClassName: traefik
   rules:
     - host: vscode.home.renner.uno
       http:
diff --git a/kubernetes/infrastructure/cloudflared/configmap.yaml b/kubernetes/infrastructure/cloudflared/configmap.yaml
index b5df09dd..1079d618 100644
--- a/kubernetes/infrastructure/cloudflared/configmap.yaml
+++ b/kubernetes/infrastructure/cloudflared/configmap.yaml
@@ -22,7 +22,7 @@ data:
           noTLSVerify: true
 
       - hostname: home.renner.uno
-        service: https://ingress-nginx-controller.ingress.svc.cluster.local:443
+        service: https://traefik.ingress.svc.cluster.local:443
         originRequest:
           noTLSVerify: true
 
diff --git a/kubernetes/infrastructure/traefik/helmrelease.yaml b/kubernetes/infrastructure/traefik/helmrelease.yaml
index bc5e61f8..7bacd201 100644
--- a/kubernetes/infrastructure/traefik/helmrelease.yaml
+++ b/kubernetes/infrastructure/traefik/helmrelease.yaml
@@ -75,6 +75,15 @@ spec:
         # against the LAN VIP.
         http3:
           enabled: true
+        transport:
+          respondingTimeouts:
+            # Default is 180s, which cuts long-lived idle WS used by
+            # home-assistant dashboards, vscode (code-server), woodpecker
+            # live log streams, and pve noVNC consoles. Matches the
+            # proxy-read/send-timeout=3600s the nginx ingresses had.
+            readTimeout: "3600s"
+            writeTimeout: "3600s"
+            idleTimeout: "3600s"
     service:
       enabled: true
       spec: