diff --git a/patterns/1f0702aaabef60a615abf41f_resources/resources.zip b/patterns/1f0702aaabef60a615abf41f_resources/resources.zip
index 849e62a..7774dbf 100644
Binary files a/patterns/1f0702aaabef60a615abf41f_resources/resources.zip and b/patterns/1f0702aaabef60a615abf41f_resources/resources.zip differ
diff --git a/patterns/204c22beaccdfd22727af378_labels/labels.zip b/patterns/204c22beaccdfd22727af378_labels/labels.zip
index c28e7e4..222abc8 100644
Binary files a/patterns/204c22beaccdfd22727af378_labels/labels.zip and b/patterns/204c22beaccdfd22727af378_labels/labels.zip differ
diff --git a/patterns/204c22beaccdfd22727af378_template/webdata.zip b/patterns/204c22beaccdfd22727af378_template/webdata.zip
index 51c06d0..b78edf2 100644
Binary files a/patterns/204c22beaccdfd22727af378_template/webdata.zip and b/patterns/204c22beaccdfd22727af378_template/webdata.zip differ
diff --git a/patterns/4fcfadb4a5c946ead7e6e995_labels/labels.zip b/patterns/4fcfadb4a5c946ead7e6e995_labels/labels.zip
index c28e7e4..222abc8 100644
Binary files a/patterns/4fcfadb4a5c946ead7e6e995_labels/labels.zip and b/patterns/4fcfadb4a5c946ead7e6e995_labels/labels.zip differ
diff --git a/patterns/4fcfadb4a5c946ead7e6e995_template/webdata.zip b/patterns/4fcfadb4a5c946ead7e6e995_template/webdata.zip
index 51c06d0..b78edf2 100644
Binary files a/patterns/4fcfadb4a5c946ead7e6e995_template/webdata.zip and b/patterns/4fcfadb4a5c946ead7e6e995_template/webdata.zip differ
diff --git a/patterns/584964c837512845d7940809_authStatesFile/recovery-preprocessing.xml b/patterns/584964c837512845d7940809_authStatesFile/recovery-preprocessing.xml
index 207fa9c..33bf9b4 100644
--- a/patterns/584964c837512845d7940809_authStatesFile/recovery-preprocessing.xml
+++ b/patterns/584964c837512845d7940809_authStatesFile/recovery-preprocessing.xml
@@ -25,7 +25,7 @@
 	<property name="condition:cancel" value="#{inargs.containsKey('cancel')}"/>
 	<property name="condition:hasCode" value="#{inargs.containsKey('cd')}"/>
 	<property name="condition:hasSessionCode" value="#{sess.get('agov.recovery.code')}"/>
-	<property name="condition:invalidUrl" value="#{!inctx.getProperty('connection.actualURL').matches('((https://.*/AUTH/RECOVERY/\\?$)|(https://.*/AUTH/RECOVERY/$)|(https://.*/AUTH/RECOVERY/\\?language=(de|fr|it|en))|(https://.*/AUTH/RECOVERY/\\?cd=.*))')}"/>
+	<property name="condition:invalidUrl" value="#{!inctx.getProperty('connection.actualURL').matches('^https://[^/]*/AUTH/RECOVERY/(\\?|\\?&amp;?language=[a-z][a-z]|\\?cd=.+)?$')}"/>
 	<property name="condition:invalidUrlTicket" value="${notes:invalidUrlTicket}"/>
 	<property name="condition:hasCaptchaInfos" value="#{sess.get('agov.recovery.captchaSettings.puzzleUrl')}"/>
 </AuthState>
diff --git a/patterns/ExternalIngressSettings_2c4d703681e5bd52174a95e4.yml b/patterns/ExternalIngressSettings_2c4d703681e5bd52174a95e4.yml
new file mode 100644
index 0000000..0ec5b92
--- /dev/null
+++ b/patterns/ExternalIngressSettings_2c4d703681e5bd52174a95e4.yml
@@ -0,0 +1,8 @@
+schemaVersion: "1.0"
+pattern:
+  id: "2c4d703681e5bd52174a95e4"
+  className: "ch.nevis.admin.v4.plugin.nevisproxy.patterns.GenericIngressSettings"
+  name: "ExternalIngressSettings"
+  properties:
+    annotations: "var://externalingresssettings-annotations"
+    ingressClassName: "var://externalingresssettings-class-name"
diff --git a/patterns/Recovery_Pdf_Session_Processing_db89acad30d11cbc950a87c7.yml b/patterns/Recovery_Pdf_Session_Processing_db89acad30d11cbc950a87c7.yml
index 92c081f..f7a1d5f 100644
--- a/patterns/Recovery_Pdf_Session_Processing_db89acad30d11cbc950a87c7.yml
+++ b/patterns/Recovery_Pdf_Session_Processing_db89acad30d11cbc950a87c7.yml
@@ -4,6 +4,10 @@ pattern:
   className: "ch.nevis.admin.v4.plugin.nevisproxy.patterns.LuaPattern"
   name: "Recovery_Pdf_Session_Processing"
   label: "UTILS"
+  notes: "Script Parameters needs an entry 'param_auth_signer_key' which contains\
+    \ the public key of the signer key used by nevisAuth (\\n replaced by <br>-tags).\n\
+    \npublic key can be optained of the certificate:\nopenssl x509 -pubkey -noout\
+    \ -in signer-cert.pem | sed -z 's/\\n/<br>/g'"
   properties:
     script: "res://db89acad30d11cbc950a87c7#script"
     phase: "END"
diff --git a/patterns/nevisProxy_idp_0ceb05c56644a59d648c13b9.yml b/patterns/nevisProxy_idp_0ceb05c56644a59d648c13b9.yml
index cdffb35..1c624d9 100644
--- a/patterns/nevisProxy_idp_0ceb05c56644a59d648c13b9.yml
+++ b/patterns/nevisProxy_idp_0ceb05c56644a59d648c13b9.yml
@@ -12,3 +12,4 @@ pattern:
     - "pattern://1f0702aaabef60a615abf41f"
     addons:
     - "pattern://65b7853f9cffcb38407e1fd2"
+    - "pattern://2c4d703681e5bd52174a95e4"
diff --git a/variables.yml b/variables.yml
index bc50607..826bfcf 100644
--- a/variables.yml
+++ b/variables.yml
@@ -148,6 +148,21 @@ variables:
       secretPreserving: true
     value: null
     requireOverloading: true
+  externalingresssettings-annotations:
+    className: "ch.nevis.admin.v4.plugin.base.generation.property.KeyValueProperty"
+    parameters:
+      separators:
+      - ":"
+      switchedSeparators: []
+    value: null
+    requireOverloading: true
+  externalingresssettings-class-name:
+    className: "ch.nevis.admin.v4.plugin.base.generation.property.SimpleTextProperty"
+    parameters:
+      minRequired: 0
+      maxAllowed: 1
+    value: "nginx"
+    requireOverloading: true
   extid_user_verify-template-parameters:
     className: "ch.nevis.admin.v4.plugin.base.generation.property.TextProperty"
     parameters: