diff --git a/chart/values.prod.yaml b/chart/values.prod.yaml
index d339c32..a24d870 100644
--- a/chart/values.prod.yaml
+++ b/chart/values.prod.yaml
@@ -1,4 +1,14 @@
 ingress:
+  hostname: jobmgr.mmli1.ncsa.illinois.edu
+  tls: true
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-production
+    kubernetes.io/tls-acme: "true"
+    traefik.ingress.kubernetes.io/router.tls: "true"
+    traefik.ingress.kubernetes.io/router.middlewares: oauth2-proxy-cors-header@kubernetescrd
+
+jobSubmitIngress:
+  ingressClassName: traefik
   hostname: jobmgr.mmli1.ncsa.illinois.edu
   tls: true
   annotations:
diff --git a/chart/values.staging.yaml b/chart/values.staging.yaml
index 22de047..fd48575 100644
--- a/chart/values.staging.yaml
+++ b/chart/values.staging.yaml
@@ -8,14 +8,13 @@ ingress:
     traefik.ingress.kubernetes.io/router.middlewares: staging-cors-header@kubernetescrd
 
 jobSubmitIngress:
-  #ingressClassName: nginx
   ingressClassName: traefik
-  hostname: jobmgr.proxy.localhost
-  tls: false
+  hostname: jobmgr.staging.mmli1.ncsa.illinois.edu
+  tls: true
   annotations:
-    nginx.ingress.kubernetes.io/enable-cors: "true"
-    nginx.ingress.kubernetes.io/cors-allow-origin: "https://clean.proxy.localhost,https://molli.proxy.localhost,http://localhost:4200"
-    nginx.ingress.kubernetes.io/cors-allow-credentials: "true"
+    cert-manager.io/cluster-issuer: letsencrypt-production
+    kubernetes.io/tls-acme: "true"
+    traefik.ingress.kubernetes.io/router.tls: "true"
     traefik.ingress.kubernetes.io/router.middlewares: staging-cors-header@kubernetescrd,staging-jobmgr-submit-ip-ratelimit@kubernetescrd