diff --git a/layer_1/src/config/traefik/discord-forward-auth.yaml b/layer_1/src/config/traefik/discord-forward-auth.yaml
index dfd53988..14a8688e 100644
--- a/layer_1/src/config/traefik/discord-forward-auth.yaml
+++ b/layer_1/src/config/traefik/discord-forward-auth.yaml
@@ -73,6 +73,22 @@ rules:
       - "856290331292991489"
       # Elo Team
       - "930203170636976178"
+  - key: "ImageGeneration"
+    type: "roles"
+    guildId: "856290331279884288"
+    roleIds:
+      # Maintainer
+      - "856290331292991490"
+      # Administrator
+      - "856290331292991489"
+      # Developer
+      - "856291576014569502"
+      # Data Team
+      - "923396697600704532"
+      # Design
+      - "895054913212665898"
+      # MLE Staff
+      - "892975231847764028"
 
 defaultRule:
   key: "DefaultRule"
diff --git a/platform/src/Platform.ts b/platform/src/Platform.ts
index 0581c39a..d3fe8c40 100644
--- a/platform/src/Platform.ts
+++ b/platform/src/Platform.ts
@@ -136,6 +136,7 @@ export class Platform extends pulumi.ComponentResource {
           .tls("lets-encrypt-tls")
           .rule(`Host(\`${this.igUrl}\`)`)
           .targetPort(3000)
+          .forwardAuthRule("ImageGeneration")
 
         if (config.getBoolean("alpha-restrictions")) {
             webLabels.forwardAuthRule("AlphaTesters")