diff --git a/cluster/apps/media/plex/helm-release.yaml b/cluster/apps/media/plex/helm-release.yaml
index ed6a47a..fa805cd 100644
--- a/cluster/apps/media/plex/helm-release.yaml
+++ b/cluster/apps/media/plex/helm-release.yaml
@@ -48,7 +48,7 @@ spec:
         enabled: true
         annotations:
           cert-manager.io/cluster-issuer: "letsencrypt-production"
-          traefik.ingress.kubernetes.io/router.entrypoints: websecure
+          traefik.ingress.kubernetes.io/router.entrypoints: websecure,plex
         hosts:
           - host: "plex.${SECRET_NEW_DOMAIN}"
             paths:
diff --git a/cluster/core/networking/traefik/helm-release.yaml b/cluster/core/networking/traefik/helm-release.yaml
index 8a7963e..3fff001 100644
--- a/cluster/core/networking/traefik/helm-release.yaml
+++ b/cluster/core/networking/traefik/helm-release.yaml
@@ -18,6 +18,9 @@ spec:
     additionalArguments:
     - --api.insecure
 
+    # define an entrypoint just for plex (spoiled brat)
+    - --entrypoints.plex.address=:32400
+
     logs:
       general:
         level: DEBUG