diff --git a/deployments/ssl/certmanager.yaml b/deployments/ssl/certmanager.yaml
index d27a9cb..a10e816 100644
--- a/deployments/ssl/certmanager.yaml
+++ b/deployments/ssl/certmanager.yaml
@@ -60,10 +60,9 @@ metadata:
 spec:
   secretName: wildcard-hxme-net
   secretTemplate:
-    metadata:
-      annotations:
-        replicator.v1.mittwald.de/replication-allowed: "true"
-        replicator.v1.mittwald.de/replication-allowed-namespaces: "nextcloud"
+    annotations:
+      replicator.v1.mittwald.de/replication-allowed: "true"
+      replicator.v1.mittwald.de/replication-allowed-namespaces: "nextcloud"
   issuerRef:
     name: letsencrypt-rfc2136
     kind: ClusterIssuer