diff --git a/infrastructure/traefik/helm-release.yaml b/infrastructure/traefik/helm-release.yaml
index 6896468..f57f5e5 100644
--- a/infrastructure/traefik/helm-release.yaml
+++ b/infrastructure/traefik/helm-release.yaml
@@ -292,3 +292,33 @@ spec:
               services:
                 - name: mariadb
                   port: 3306
+      - apiVersion: traefik.io/v1alpha1
+        kind: Middleware
+        metadata:
+          name: re7sweb-ipallowlist
+          namespace: common-services
+        spec:
+          ipAllowList:
+            sourceRange:
+              - 46.18.126.208/28 # LDC
+              - 62.193.56.48/32 # OPENevents - Bureau Neuville
+              - 80.15.14.76/32 # LDC web - Box externe
+              - 86.65.205.240/28 # LDC
+              - 135.125.42.176/28 # LDC
+              - 149.202.23.64/26 # LDC
+              - 151.80.95.176/28 # LDC
+              - 217.15.92.64/28 # LDC
+      - apiVersion: traefik.io/v1alpha1
+        kind: IngressRoute
+        metadata:
+          name: re7sweb-wildcard
+          namespace: common-services
+        spec:
+          entryPoints:
+            - websecure
+          routes:
+            - match: HostRegexp(`{subdomain:[a-z0-9-]+}.re7-s-web.fr`)
+              kind: Rule
+              middlewares:
+                - name: re7sweb-ipallowlist
+