diff --git a/README.md b/README.md
index 716c0dc79daa2c33113dae88e2265fede630ab82..c518bdc0c7f2e6697abe064edd82d0a091f6e475 100644
--- a/README.md
+++ b/README.md
@@ -42,8 +42,8 @@ This toolchain is still under development. Before it will be used in production
 - [x] Add encrypted deployment instructions (SOPS + fluxcd)
 - [x] Integrate [Renovatebot](https://git.shivering-isles.com/shivering-isles/renovate-bot) with this repository to manage updates.
 - [x] Automate Kubernetes upgrades
+- [x] Automate ingress-controller configuration for proxy-protocol
 - [ ] Deploy kubelet with proper certificates
-- [ ] Automate ingress-controller configuration for proxy-protocol
 - [ ] Document usage and thoughts in repository and blog posts
 - [ ] Automate flux OpenPGP bootstrap
 - [ ] Migrate [apps](https://git.shivering-isles.com/shivering-isles/infrastructure/) to gitops and Kubernetes
diff --git a/terraform/k8s01/templates/cloud-init.tpl b/terraform/k8s01/templates/cloud-init.tpl
index 882d13442a1360ae090e313fbbad2244f11ff6ae..ffab6aff7ada9b0f53b28f805120e1de7547ef0b 100644
--- a/terraform/k8s01/templates/cloud-init.tpl
+++ b/terraform/k8s01/templates/cloud-init.tpl
@@ -41,7 +41,7 @@ listen l1
     timeout connect  4s
     timeout client   180s
     timeout server   180s
-    server srv1-http ingress.k8s01.si-infra.de:80 check inter 5s
+    server srv1-http ingress.k8s01.si-infra.de:80 check inter 5s send-proxy-v2
 listen l2
     bind 0.0.0.0:443
     bind :::443
@@ -49,7 +49,7 @@ listen l2
     timeout connect  4s
     timeout client   180s
     timeout server   180s
-    server srv1-https ingress.k8s01.si-infra.de:443 check inter 5s
+    server srv1-https ingress.k8s01.si-infra.de:443 check inter 5s send-proxy-v2
 listen submissions
     bind 0.0.0.0:465
     bind :::465