diff --git a/umami/ingress.yaml b/umami/ingress.yaml
index fe4ddf0..b89196a 100644
--- a/umami/ingress.yaml
+++ b/umami/ingress.yaml
@@ -1,10 +1,36 @@
+# Public Ingress - Share URLs (no auth required)
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: umami-share
+  namespace: umami
+  annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-prod"
+spec:
+  ingressClassName: traefik
+  tls:
+  - hosts:
+    - umami0213.kro.kr
+    secretName: umami-tls
+  rules:
+    - host: umami0213.kro.kr
+      http:
+        paths:
+          - path: /share
+            pathType: Prefix
+            backend:
+              service:
+                name: umami
+                port:
+                  number: 3000
+---
+# Protected Ingress - Dashboard (Authelia SSO required)
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: umami-ingress
   namespace: umami
   annotations:
-    cert-manager.io/cluster-issuer: "letsencrypt-prod"
     traefik.ingress.kubernetes.io/router.middlewares: authelia-authelia-auth@kubernetescrd
 spec:
   ingressClassName: traefik