diff --git a/kubernetes/apps/music-assistant/ingress.yaml b/kubernetes/apps/music-assistant/ingress.yaml
index 8d52c64b..0e077c75 100644
--- a/kubernetes/apps/music-assistant/ingress.yaml
+++ b/kubernetes/apps/music-assistant/ingress.yaml
@@ -3,13 +3,6 @@ kind: Ingress
 metadata:
   name: music-assistant
   namespace: music-assistant
-  labels:
-    # Publishes the hostnames into Cloudflare via the cluster's
-    # cloudflare-scoped external-dns instance (kubernetes/apps/
-    # external-dns/helmrelease.yaml selects on this label). external-
-    # dns creates CNAMEs to the cargo tunnel; cloudflared forwards
-    # inbound to traefik.
-    external-dns/cloudflare: "true"
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-cluster
 spec:
diff --git a/kubernetes/infrastructure/cloudflared/configmap.yaml b/kubernetes/infrastructure/cloudflared/configmap.yaml
index bb34ba77..d3b24e4e 100644
--- a/kubernetes/infrastructure/cloudflared/configmap.yaml
+++ b/kubernetes/infrastructure/cloudflared/configmap.yaml
@@ -21,10 +21,5 @@ data:
         originRequest:
           noTLSVerify: true
 
-      - hostname: music.renner.uno
-        service: https://traefik.ingress.svc.cluster.local:443
-        originRequest:
-          noTLSVerify: true
-
       # Catch-all
       - service: http_status:404