diff --git a/clusters/lab/apps/online-boutique.yaml b/clusters/lab/apps/online-boutique.yaml
index 703db22..fd00701 100644
--- a/clusters/lab/apps/online-boutique.yaml
+++ b/clusters/lab/apps/online-boutique.yaml
@@ -125,6 +125,7 @@ metadata:
   namespace: online-boutique
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-prod
+    traefik.ingress.kubernetes.io/router.middlewares: default-redirect-https@kubernetescrd
 spec:
   ingressClassName: traefik
   rules:
diff --git a/clusters/lab/infrastructure/traefik-redirect.yaml b/clusters/lab/infrastructure/traefik-redirect.yaml
new file mode 100644
index 0000000..a7ee650
--- /dev/null
+++ b/clusters/lab/infrastructure/traefik-redirect.yaml
@@ -0,0 +1,9 @@
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: redirect-https
+  namespace: default
+spec:
+  redirectScheme:
+    scheme: https
+    permanent: true
diff --git a/clusters/lab/infrastructure/weave-gitops.yaml b/clusters/lab/infrastructure/weave-gitops.yaml
index 2f68c2a..059ff10 100644
--- a/clusters/lab/infrastructure/weave-gitops.yaml
+++ b/clusters/lab/infrastructure/weave-gitops.yaml
@@ -64,6 +64,7 @@ metadata:
   namespace: flux-system
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-prod
+    traefik.ingress.kubernetes.io/router.middlewares: default-redirect-https@kubernetescrd
 spec:
   ingressClassName: traefik
   rules: