diff --git a/homer/configmaps.yaml b/homer/configmaps.yaml
index ce6694d..9131955 100644
--- a/homer/configmaps.yaml
+++ b/homer/configmaps.yaml
@@ -82,6 +82,12 @@ data:
       - name: "Network"
         icon: "fas fa-cloud"
         items:
+          - name: "Lancom"
+            logo: "assets/logos/sophos.png"
+            subtitle: "Lancom Router"
+            tag: "app"
+            keywords: "lancom router"
+            url: "https://lancom.apps.undercloud.dev"
           - name: "SophosXG"
             logo: "assets/logos/sophos.png"
             subtitle: "Admin Webinterface"
diff --git a/ingress-external-devices/lancom.yaml b/ingress-external-devices/lancom.yaml
new file mode 100644
index 0000000..1f14fb2
--- /dev/null
+++ b/ingress-external-devices/lancom.yaml
@@ -0,0 +1,58 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: lancom
+  namespace: ingress-external
+spec:
+  ports:
+  - name: https
+    port: 443
+    targetPort: 443
+---
+apiVersion: v1
+kind: Endpoints
+metadata:
+  name: lancom
+  namespace: ingress-external
+subsets:
+- addresses:
+  - ip: fd00::1
+  - ip: 10.0.0.1      # <-- replace with lancom IP
+  ports:
+  - port: 443
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: lancom
+  namespace: ingress-external
+  annotations:
+    kubernetes.io/ingress.class: nginx
+    cert-manager.io/cluster-issuer: letsencrypt
+    nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+    nginx.ingress.kubernetes.io/upstream-vhost: "lancom.undercloud.local"
+    nginx.ingress.kubernetes.io/proxy-ssl-server-name: "true"
+    nginx.ingress.kubernetes.io/proxy-ssl-name: "lancom.undercloud.local"
+    nginx.ingress.kubernetes.io/proxy-ssl-verify: "false"
+    nginx.ingress.kubernetes.io/proxy-redirect-from: "https://lancom.undercloud.local:8007"
+    nginx.ingress.kubernetes.io/proxy-redirect-to:   "https://lancom.apps.undercloud.dev"
+    nginx.ingress.kubernetes.io/proxy-body-size: "0"
+    nginx.ingress.kubernetes.io/proxy-read-timeout: "3600"
+    nginx.ingress.kubernetes.io/proxy-send-timeout: "3600"
+spec:
+  ingressClassName: nginx
+  tls:
+  - hosts: [lancom.apps.undercloud.dev]
+    secretName: lancom-tls
+  rules:
+  - host: lancom.apps.undercloud.dev
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: lancom
+            port:
+              number: 443
\ No newline at end of file