diff --git a/external-services/windmill.yaml b/external-services/windmill.yaml
new file mode 100644
index 0000000..a1b737d
--- /dev/null
+++ b/external-services/windmill.yaml
@@ -0,0 +1,34 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: windmill
+  namespace: external-services
+spec:
+  externalName: noctowl.cascade.strudelline.net
+  type: ExternalName
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: windmill
+  namespace: external-services
+  annotations:
+    haproxy-ingress.github.io/ssl-redirect: "true"
+    #haproxy-ingress.github.io/backend-protocol: "h1-ssl"
+spec:
+  ingressClassName: haproxy
+  rules:
+  - host: windmill.strudelline.net
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: windmill
+            port:
+              number: 8444
+  tls:
+  - hosts:
+    - windmill.strudelline.net
+    secretName: wildcard-tls
diff --git a/storage-classes/ssd.yaml b/storage-classes/ssd.yaml
index ac6ae99..4170579 100644
--- a/storage-classes/ssd.yaml
+++ b/storage-classes/ssd.yaml
@@ -2,7 +2,7 @@ apiVersion: storage.k8s.io/v1
 kind: StorageClass
 metadata:
   annotations:
-    storageclass.kubernetes.io/is-default-class: "true"
+    storageclass.kubernetes.io/is-default-class: "false"
   name: ssd
 parameters:
   storage: lvm