diff --git a/apps/openwebui/ingress.yaml b/apps/openwebui/ingress.yaml
new file mode 100644
index 0000000..84edeca
--- /dev/null
+++ b/apps/openwebui/ingress.yaml
@@ -0,0 +1,44 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  namespace: openwebui
+  name: openwebui-web
+spec:
+  type: ClusterIP
+  selector:
+    app.kubernetes.io/component: open-webui
+    app.kubernetes.io/instance: openwebui
+  ports:
+    - name: http
+      port: 80
+      targetPort: 8080
+      protocol: TCP
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  namespace: openwebui
+  name: openwebui
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt
+    nginx.ingress.kubernetes.io/proxy-body-size: "0"
+    nginx.ingress.kubernetes.io/proxy-buffering: "false"
+    nginx.ingress.kubernetes.io/proxy-read-timeout: 30m
+spec:
+  ingressClassName: nginx-ingress
+  rules:
+    - host: openwebui.lumpiasty.xyz
+      http:
+        paths:
+          - backend:
+              service:
+                name: openwebui-web
+                port:
+                  number: 80
+            path: /
+            pathType: Prefix
+  tls:
+    - hosts:
+        - openwebui.lumpiasty.xyz
+      secretName: openwebui-ingress
diff --git a/apps/openwebui/kustomization.yaml b/apps/openwebui/kustomization.yaml
index ad7ceac..0c20be3 100644
--- a/apps/openwebui/kustomization.yaml
+++ b/apps/openwebui/kustomization.yaml
@@ -5,3 +5,4 @@ resources:
   - pvc.yaml
   - pvc-pipelines.yaml
   - release.yaml
+  - ingress.yaml
diff --git a/apps/openwebui/release.yaml b/apps/openwebui/release.yaml
index 02d9985..d823874 100644
--- a/apps/openwebui/release.yaml
+++ b/apps/openwebui/release.yaml
@@ -23,17 +23,11 @@ spec:
         kind: HelmRepository
         name: open-webui
   values:
+    # Disable built in ingress, service is broken in chart
+    # They have hard coded wrong target port
+    # Reimplementing that in ingress.yaml
     ingress:
-      enabled: true
-      class: nginx-ingress
-      host: openwebui.lumpiasty.xyz
-      tls: true
-      existingSecret: openwebui-ingress
-      annotations:
-        cert-manager.io/cluster-issuer: letsencrypt
-        nginx.ingress.kubernetes.io/proxy-body-size: "0"
-        nginx.ingress.kubernetes.io/proxy-buffering: "false"
-        nginx.ingress.kubernetes.io/proxy-read-timeout: 30m
+      enabled: false
 
     persistence:
       enabled: true