diff --git a/deployments/files/nextcloud.yaml b/deployments/files/nextcloud.yaml
index 61670f7..70a4ef0 100644
--- a/deployments/files/nextcloud.yaml
+++ b/deployments/files/nextcloud.yaml
@@ -114,7 +114,7 @@ metadata:
   name: wildcard-hxme-net
   namespace: nextcloud
   annotations:
-    reflector.v1.k8s.emberstack.com/reflects: "cert-manager/wildcard-hxme-net"
+    replicator.v1.mittwald.de/replicate-from: cert-manager/wildcard-hxme-net
 ---
 apiVersion: networking.k8s.io/v1
 kind: Ingress
diff --git a/deployments/ssl/certmanager.yaml b/deployments/ssl/certmanager.yaml
index 0df7360..a172ee5 100644
--- a/deployments/ssl/certmanager.yaml
+++ b/deployments/ssl/certmanager.yaml
@@ -59,6 +59,11 @@ metadata:
   namespace: cert-manager
 spec:
   secretName: wildcard-hxme-net
+  secretTemplate:
+    metadata:
+      annotations:
+        replicator.v1.mittwald.de/replication-allowed: "true"
+        replicator.v1.mittwald.de/replication-allowed-namespaces: "nextcloud"
   issuerRef:
     name: letsencrypt-rfc2136
     kind: ClusterIssuer