diff --git a/config/config.yml b/config/config.yml
index 0f1350b..279fca5 100644
--- a/config/config.yml
+++ b/config/config.yml
@@ -18,6 +18,7 @@ http:
     forward-duckdns:
       service: noop@internal
       rule: HostRegexp(`(.+\.)?urmel\.duckdns\.org`)
+      priority: 1
       middlewares: redirect-duckdns@file
       tls: 
         certResolver: duckdns
diff --git a/config/external.yml b/config/external.yml
index 9382514..2d2855c 100644
--- a/config/external.yml
+++ b/config/external.yml
@@ -1,16 +1,25 @@
-http: 
+http:
   routers:
     homeassistant:
       service: homeassistant
       rule: Host(`home.urmel.de`)
+      priority: 10
       entryPoints:
         - https
         - http
-      tls: true
-  
+      tls:
+        certResolver: hetzner
+      middlewares:
+        - homeassistant-headers
   services:
-    homeassistant: 
+    homeassistant:
       loadbalancer:
         servers:
           - url: "http://172.24.2.4:8123"
-        passHostHeader: true
\ No newline at end of file
+        passHostHeader: true
+  middlewares:
+    homeassistant-headers:
+      headers:
+        customRequestHeaders:
+          X-Frame-Options: "ALLOW-FROM *"
+          Content-Security-Policy: "frame-ancestors *"
\ No newline at end of file