diff --git a/tenants/acme/30-apps-stubs.yaml b/tenants/acme/30-apps-stubs.yaml
index 78a154c..5a88712 100644
--- a/tenants/acme/30-apps-stubs.yaml
+++ b/tenants/acme/30-apps-stubs.yaml
@@ -47,7 +47,6 @@ spec:
   tls:
     - hosts:
         - acme.athleticmap.com
-        - auth-acme.athleticmap.com
       secretName: acme-tls
   rules:
     - host: acme.athleticmap.com
@@ -71,8 +70,4 @@ spec:
           # este — o Traefik ordena por tamanho. Conferido.
           - { path: /api, pathType: Prefix, backend: { service: { name: frontend-spa, port: { number: 80 } } } }
           - { path: /, pathType: Prefix, backend: { service: { name: frontend-spa, port: { number: 80 } } } }
-    - host: auth-acme.athleticmap.com
-      http:
-        paths:
-          - { path: /, pathType: Prefix, backend: { service: { name: keycloak, port: { number: 8080 } } } }
 
diff --git a/tenants/demo/30-apps-stubs.yaml b/tenants/demo/30-apps-stubs.yaml
index 19e3919..96390a7 100644
--- a/tenants/demo/30-apps-stubs.yaml
+++ b/tenants/demo/30-apps-stubs.yaml
@@ -47,7 +47,6 @@ spec:
   tls:
     - hosts:
         - demo.athleticmap.com
-        - auth-demo.athleticmap.com
       secretName: demo-tls
   rules:
     - host: demo.athleticmap.com
@@ -71,8 +70,4 @@ spec:
           # este — o Traefik ordena por tamanho. Conferido.
           - { path: /api, pathType: Prefix, backend: { service: { name: frontend-spa, port: { number: 80 } } } }
           - { path: /, pathType: Prefix, backend: { service: { name: frontend-spa, port: { number: 80 } } } }
-    - host: auth-demo.athleticmap.com
-      http:
-        paths:
-          - { path: /, pathType: Prefix, backend: { service: { name: keycloak, port: { number: 8080 } } } }
 
diff --git a/tenants/escolinha/30-apps-stubs.yaml b/tenants/escolinha/30-apps-stubs.yaml
index b1bc32d..aabe3dd 100644
--- a/tenants/escolinha/30-apps-stubs.yaml
+++ b/tenants/escolinha/30-apps-stubs.yaml
@@ -47,7 +47,6 @@ spec:
   tls:
     - hosts:
         - escolinha.athleticmap.com
-        - auth-escolinha.athleticmap.com
       secretName: escolinha-tls
   rules:
     - host: escolinha.athleticmap.com
@@ -71,8 +70,4 @@ spec:
           # este — o Traefik ordena por tamanho. Conferido.
           - { path: /api, pathType: Prefix, backend: { service: { name: frontend-spa, port: { number: 80 } } } }
           - { path: /, pathType: Prefix, backend: { service: { name: frontend-spa, port: { number: 80 } } } }
-    - host: auth-escolinha.athleticmap.com
-      http:
-        paths:
-          - { path: /, pathType: Prefix, backend: { service: { name: keycloak, port: { number: 8080 } } } }
 
diff --git a/tenants/piloto/30-apps-stubs.yaml b/tenants/piloto/30-apps-stubs.yaml
index 07e2721..a3a22a8 100644
--- a/tenants/piloto/30-apps-stubs.yaml
+++ b/tenants/piloto/30-apps-stubs.yaml
@@ -47,7 +47,6 @@ spec:
   tls:
     - hosts:
         - piloto.athleticmap.com
-        - auth-piloto.athleticmap.com
       secretName: piloto-tls
   rules:
     - host: piloto.athleticmap.com
@@ -71,8 +70,4 @@ spec:
           # este — o Traefik ordena por tamanho. Conferido.
           - { path: /api, pathType: Prefix, backend: { service: { name: frontend-spa, port: { number: 80 } } } }
           - { path: /, pathType: Prefix, backend: { service: { name: frontend-spa, port: { number: 80 } } } }
-    - host: auth-piloto.athleticmap.com
-      http:
-        paths:
-          - { path: /, pathType: Prefix, backend: { service: { name: keycloak, port: { number: 8080 } } } }