diff --git a/deploy-k3s/manifests/ingress/ingress.yaml b/deploy-k3s/manifests/ingress/ingress.yaml
deleted file mode 100644
index e30bf31..0000000
--- a/deploy-k3s/manifests/ingress/ingress.yaml
+++ /dev/null
@@ -1,54 +0,0 @@
-# API Ingress — Cloudflare-only + security headers + rate limiting
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: honeydue-api
-  namespace: honeydue
-  labels:
-    app.kubernetes.io/part-of: honeydue
-  annotations:
-    traefik.ingress.kubernetes.io/router.middlewares: honeydue-cloudflare-only@kubernetescrd,honeydue-security-headers@kubernetescrd,honeydue-rate-limit@kubernetescrd
-spec:
-  tls:
-    - hosts:
-        - api.myhoneydue.com
-      secretName: cloudflare-origin-cert
-  rules:
-    - host: api.myhoneydue.com
-      http:
-        paths:
-          - path: /
-            pathType: Prefix
-            backend:
-              service:
-                name: api
-                port:
-                  number: 8000
-
----
-# Admin Ingress — Cloudflare-only + security headers + rate limiting + basic auth
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: honeydue-admin
-  namespace: honeydue
-  labels:
-    app.kubernetes.io/part-of: honeydue
-  annotations:
-    traefik.ingress.kubernetes.io/router.middlewares: honeydue-cloudflare-only@kubernetescrd,honeydue-security-headers@kubernetescrd,honeydue-rate-limit@kubernetescrd,honeydue-admin-auth@kubernetescrd
-spec:
-  tls:
-    - hosts:
-        - admin.myhoneydue.com
-      secretName: cloudflare-origin-cert
-  rules:
-    - host: admin.myhoneydue.com
-      http:
-        paths:
-          - path: /
-            pathType: Prefix
-            backend:
-              service:
-                name: admin
-                port:
-                  number: 3000