diff --git a/wanderer-system/wanderer.yaml b/wanderer-system/wanderer.yaml
index 7d531d0..2ebd793 100644
--- a/wanderer-system/wanderer.yaml
+++ b/wanderer-system/wanderer.yaml
@@ -203,7 +203,7 @@ spec:
         - name: POCKETBASE_URL
           value: "http://wanderer-db:8090" 
         - name: PUBLIC_POCKETBASE_URL
-          value: "http://wanderer-db:8090"
+          value: "https://pb.wanderer.dooplex.hu"
         - name: MEILI_URL
           value: "http://wanderer-meilisearch:7700"
         - name: MEILI_MASTER_KEY
@@ -289,85 +289,60 @@ spec:
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
-  name: wanderer
+  name: wanderer-web
   namespace: wanderer-system
-  labels:
-    app.kubernetes.io/instance: wanderer
-    app.kubernetes.io/name: wanderer
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-prod
-    external-dns.alpha.kubernetes.io/hostname: wanderer.dooplex.hu,wanderer.home
     nginx.ingress.kubernetes.io/ssl-redirect: "true"
     nginx.ingress.kubernetes.io/proxy-body-size: "100m"
+    # optional, only if you actually use external-dns:
+    external-dns.alpha.kubernetes.io/hostname: wanderer.dooplex.hu
 spec:
   ingressClassName: nginx-internal
-  rules:
-  - host: wanderer.dooplex.hu
-    http:
-      paths:
-      - path: /
-        pathType: Prefix
-        backend:
-          service:
-            name: wanderer-web
-            port:
-              number: 3000
-      - path: /api
-        pathType: Prefix
-        backend:
-          service:
-            name: wanderer-db
-            port:
-              number: 8090
-      - path: /public
-        pathType: Prefix
-        backend:
-          service:
-            name: wanderer-db
-            port:
-              number: 8090
-      - path: /_
-        pathType: Prefix
-        backend:
-          service:
-            name: wanderer-db
-            port:
-              number: 8090
-  - host: wanderer.home
-    http:
-      paths:
-      - path: /
-        pathType: Prefix
-        backend:
-          service:
-            name: wanderer-web
-            port:
-              number: 3000
-      - path: /api
-        pathType: Prefix
-        backend:
-          service:
-            name: wanderer-db
-            port:
-              number: 8090
-      - path: /public
-        pathType: Prefix
-        backend:
-          service:
-            name: wanderer-db
-            port:
-              number: 8090
-      - path: /_
-        pathType: Prefix
-        backend:
-          service:
-            name: wanderer-db
-            port:
-              number: 8090
   tls:
-  - hosts:
-    - wanderer.dooplex.hu
-    secretName: wanderer-tls
+    - hosts:
+        - wanderer.dooplex.hu
+      secretName: wanderer-web-tls
+  rules:
+    - host: wanderer.dooplex.hu
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: wanderer-web
+                port:
+                  number: 3000
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: wanderer-pocketbase
+  namespace: wanderer-system
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+    nginx.ingress.kubernetes.io/proxy-body-size: "100m"
+    # optional, only if you actually use external-dns:
+    external-dns.alpha.kubernetes.io/hostname: pb.wanderer.dooplex.hu
+spec:
+  ingressClassName: nginx-internal
+  tls:
+    - hosts:
+        - pb.wanderer.dooplex.hu
+      secretName: wanderer-pb-tls
+  rules:
+    - host: pb.wanderer.dooplex.hu
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: wanderer-db
+                port:
+                  number: 8090
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim