diff --git a/k8s/argo-apps/loki.yaml b/k8s/argo-apps/loki.yaml
index 2932ca8..825f876 100644
--- a/k8s/argo-apps/loki.yaml
+++ b/k8s/argo-apps/loki.yaml
@@ -40,6 +40,16 @@ spec:
           loki:
             storage:
               type: filesystem
+            ingress:
+              enabled: true
+              ingressClassName: traefik
+              annotations:
+                traefik.ingress.kubernetes.io/router.middlewares: monitoring-loki-auth-middleware@kubernetescrd
+              hosts:
+                - host: loki.fuku
+                  paths:
+                    - /
+
           prometheus:
             enabled: true
             isDefault: true
diff --git a/k8s/services/loki/sealedsecrets.yaml b/k8s/services/loki/sealedsecrets.yaml
new file mode 100644
index 0000000..e562895
--- /dev/null
+++ b/k8s/services/loki/sealedsecrets.yaml
@@ -0,0 +1,15 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: loki-auth-secret
+  namespace: monitoring
+spec:
+  encryptedData:
+    users: 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
+  template:
+    metadata:
+      creationTimestamp: null
+      name: loki-auth-secret
+      namespace: monitoring
diff --git a/k8s/services/loki/traefik-auth-middleware.yaml b/k8s/services/loki/traefik-auth-middleware.yaml
new file mode 100644
index 0000000..b67c40f
--- /dev/null
+++ b/k8s/services/loki/traefik-auth-middleware.yaml
@@ -0,0 +1,8 @@
+apiVersion: traefik.containo.us/v1alpha1
+kind: Middleware
+metadata:
+  name: loki-auth-middleware
+  namespace: monitoring
+spec:
+  basicAuth:
+    secret: loki-auth-secret
\ No newline at end of file