diff --git a/services/oauth2-proxy/ingress.yaml b/services/oauth2-proxy/ingress.yaml
index 96d16ea..0f5830c 100644
--- a/services/oauth2-proxy/ingress.yaml
+++ b/services/oauth2-proxy/ingress.yaml
@@ -6,6 +6,7 @@ metadata:
   namespace: sso
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt
+    traefik.ingress.kubernetes.io/router.middlewares: sso-oauth2-proxy-errors@kubernetescrd
 spec:
   ingressClassName: traefik
   rules: