diff --git a/apps/nihongo/basic-auth-secret.yaml b/apps/nihongo/basic-auth-secret.yaml
new file mode 100644
index 0000000..3cb6df9
--- /dev/null
+++ b/apps/nihongo/basic-auth-secret.yaml
@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: nihongo-basic-auth
+  namespace: nihongo
+type: Opaque
+data:
+  users: ZG9taW5pazokMmIkMTAkZTNKd091UmJNUDZCU2xtYjJoMm9UT3FaS3lKOUFaRUdKWm9vajBNWURGeHEvbjY4eFdLaE8K
diff --git a/apps/nihongo/ingress.yaml b/apps/nihongo/ingress.yaml
index bc0cac5..3159566 100644
--- a/apps/nihongo/ingress.yaml
+++ b/apps/nihongo/ingress.yaml
@@ -6,6 +6,7 @@ metadata:
   annotations:
     cert-manager.io/cluster-issuer: "letsencrypt-prod"
     traefik.ingress.kubernetes.io/router.entrypoints: web, websecure
+    traefik.ingress.kubernetes.io/router.middlewares: nihongo-nihongo-auth@kubernetescrd
 spec:
   ingressClassName: traefik
   rules:
diff --git a/apps/nihongo/middleware.yaml b/apps/nihongo/middleware.yaml
new file mode 100644
index 0000000..ee36dbd
--- /dev/null
+++ b/apps/nihongo/middleware.yaml
@@ -0,0 +1,10 @@
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: nihongo-auth
+  namespace: nihongo
+spec:
+  basicAuth:
+    secret: nihongo-basic-auth
+    removeHeader: true
+    realm: "nihongo"