diff --git a/manifests/media/jdownloader.yaml b/manifests/media/jdownloader.yaml
index 2752d94..9c7fc0d 100644
--- a/manifests/media/jdownloader.yaml
+++ b/manifests/media/jdownloader.yaml
@@ -23,6 +23,7 @@ spec:
           image: jlesage/jdownloader-2:latest
           ports:
             - containerPort: 5800
+            - containerPort: 9666
           env:
             - name: USER_ID
               value: "1000"
@@ -57,6 +58,9 @@ spec:
     - name: web
       port: 80
       targetPort: 5800
+    - name: clicknload
+      port: 9666
+      targetPort: 9666
 ---
 apiVersion: networking.k8s.io/v1
 kind: Ingress
@@ -84,3 +88,33 @@ spec:
                 name: jdownloader
                 port:
                   number: 80
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: jdownloader-cnl-tls
+  namespace: downloads
+spec:
+  secretName: jdownloader-cnl-tls
+  issuerRef:
+    name: internal-ca-issuer
+    kind: ClusterIssuer
+  dnsNames:
+    - jdownloader.home.arpa
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: jdownloader-cnl
+  namespace: downloads
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`jdownloader.home.arpa`) && PathPrefix(`/flash`)
+      kind: Rule
+      services:
+        - name: jdownloader
+          port: 9666
+  tls:
+    secretName: jdownloader-cnl-tls