diff --git a/headlamp/values.yaml b/headlamp/values.yaml
index 0753936..1691c59 100644
--- a/headlamp/values.yaml
+++ b/headlamp/values.yaml
@@ -2,6 +2,9 @@ ingress:
   enabled: true
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-prod
+    nginx.ingress.kubernetes.io/auth-type: basic
+    nginx.ingress.kubernetes.io/auth-secret: headlamp-basic-auth
+    nginx.ingress.kubernetes.io/auth-realm: "Authentication Required"
   hosts:
   - host: headlamp.grxe.io
     paths: