diff --git a/kube.tf.example b/kube.tf.example
index 4321eddf..6f76aa5c 100644
--- a/kube.tf.example
+++ b/kube.tf.example
@@ -820,7 +820,9 @@ service:
 
 ports:
   web:
-    redirectTo: websecure
+    redirectTo:
+      port: websecure
+      priority: 10
 
     proxyProtocol:
       trustedIPs:
diff --git a/locals.tf b/locals.tf
index 61c6217a..2a550f0f 100644
--- a/locals.tf
+++ b/locals.tf
@@ -509,7 +509,9 @@ service:
 ports:
   web:
 %{if var.traefik_redirect_to_https~}
-    redirectTo: websecure
+    redirectTo:
+      port: websecure
+      priority: 10
 %{endif~}
 %{if !local.using_klipper_lb~}
     proxyProtocol: