diff --git a/templates/Ingress-Multi.yaml b/templates/Ingress-Multi.yaml
index a787441..ed13b1d 100644
--- a/templates/Ingress-Multi.yaml
+++ b/templates/Ingress-Multi.yaml
@@ -12,3 +12,18 @@ spec:
 
 {{ end }}
 
+{{ if .Values.nfc_monitoring.grafana.ingress.enabled | default "false" | bool -}}
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: grafana
+  namespace: "{{ .Values.nfc_monitoring.grafana.namespace }}"
+  annotations:
+    {{ toYaml $.Values.nfc_monitoring.grafana.ingress.annotations | nindent 4 }}
+spec:
+  {{ toYaml $.Values.nfc_monitoring.grafana.ingress.spec | nindent 2 }}
+
+{{ end }}
+
+
diff --git a/values.yaml b/values.yaml
index 4c11006..548463c 100644
--- a/values.yaml
+++ b/values.yaml
@@ -74,6 +74,28 @@ nfc_monitoring:
       name: grafana/grafana
       tag: '10.1.2' # '10.0.5'
 
+    ingress:
+      annotations:
+        cert-manager.io/cluster-issuer: "selfsigned-issuer"
+        nginx.ingress.kubernetes.io/ssl-redirect: "true"
+      # enabled: false # Optional, boolean.
+      spec:
+        tls:
+          - hosts:
+              - grafana.local
+            secretName: certificate-tls-grafana
+        rules:
+          - host:  grafana.local
+            http:
+              paths:
+                - path: /
+                  pathType: Prefix
+                  backend:
+                    service:
+                      name: grafana
+                      port:
+                        name: grafana-http
+
     labels:
       app.kubernetes.io/component: graphing
       app.kubernetes.io/instance: k8s