diff --git a/apps/tandoor/app/route.yaml b/apps/tandoor/app/route.yaml
index 85d75ed..39b4695 100644
--- a/apps/tandoor/app/route.yaml
+++ b/apps/tandoor/app/route.yaml
@@ -9,6 +9,16 @@ spec:
       X-Forwarded-Proto: https
 ---
 apiVersion: traefik.containo.us/v1alpha1
+kind: Middleware
+metadata:
+  name: tandoor-identity
+  namespace: tandoor
+spec:
+  headers:
+    customResponseHeaders:
+      X-Hello: world
+---
+apiVersion: traefik.containo.us/v1alpha1
 kind: IngressRoute
 metadata:
   name: recipes-route
@@ -17,7 +27,7 @@ spec:
   entryPoints:
     - web
   routes:
-  - match: (Host(`recipes.trivernis.dev`) || Host(`recipes.trivernis.net`)) && (Path(`/media`) || Path(`/static`))
+  - match: Host(`recipes.trivernis.dev`, `recipes.trivernis.net`) && PathPrefix(`/media`, `/static`)
     kind: Rule
     middlewares:
       - name: security-headers
@@ -25,8 +35,8 @@ spec:
       - name: tandoor-headers
     services:
     - name: tandoor
-      port: 80
-  - match: Host(`recipes.trivernis.dev`) || Host(`recipes.trivernis.net`)
+      port: static
+  - match: Host(`recipes.trivernis.dev`, `recipes.trivernis.net`)
     kind: Rule
     middlewares:
       - name: security-headers
@@ -34,4 +44,4 @@ spec:
       - name: tandoor-headers
     services:
     - name: tandoor
-      port: 8080
\ No newline at end of file
+      port: http
\ No newline at end of file