diff --git a/apps/mail/mail.yaml b/apps/mail/mail.yaml
index 7ca814d..789ed87 100644
--- a/apps/mail/mail.yaml
+++ b/apps/mail/mail.yaml
@@ -239,3 +239,21 @@ spec:
           port: 993
   tls:
     secretName: mail-tls
+---
+# Public IngressRoute - Webmail (flowercore.io with Cloudflare origin cert)
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: mail-webmail-public
+  namespace: mail
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`webmail.flowercore.io`)
+      kind: Rule
+      services:
+        - name: mail-webmail
+          port: 8080
+  tls:
+    secretName: cf-origin-flowercore-io