diff --git a/templates/auth-authentik.yaml b/templates/auth-authentik.yaml
index 70fb400..2ee840b 100644
--- a/templates/auth-authentik.yaml
+++ b/templates/auth-authentik.yaml
@@ -8,6 +8,14 @@ spec:
   url: https://charts.goauthentik.io/
   interval: 1h
 ---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: wildcard-hxme-net
+  namespace: {{ .Release.Namespace }}
+  annotations:
+    replicator.v1.mittwald.de/replicate-from: cert-manager/wildcard-hxme-net
+---
 apiVersion: helm.toolkit.fluxcd.io/v2
 kind: HelmRelease
 metadata:
diff --git a/templates/files-nextcloud.yaml b/templates/files-nextcloud.yaml
index 71dc86a..617306e 100644
--- a/templates/files-nextcloud.yaml
+++ b/templates/files-nextcloud.yaml
@@ -103,6 +103,14 @@ spec:
   storage:
     size: 5Gi
 ---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: wildcard-hxme-net
+  namespace: {{ .Release.Namespace }}
+  annotations:
+    replicator.v1.mittwald.de/replicate-from: cert-manager/wildcard-hxme-net
+---
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
diff --git a/templates/monitoring-provider.yaml b/templates/monitoring-provider.yaml
index b3e6600..7fb6bf2 100644
--- a/templates/monitoring-provider.yaml
+++ b/templates/monitoring-provider.yaml
@@ -1,4 +1,9 @@
 ---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: monitoring
+---
 apiVersion: source.toolkit.fluxcd.io/v1
 kind: HelmRepository
 metadata:
@@ -7,3 +12,11 @@ metadata:
 spec:
   url: https://grafana.github.io/helm-charts
   interval: 1h
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: wildcard-hxme-net
+  namespace: {{ .Release.Namespace }}
+  annotations:
+    replicator.v1.mittwald.de/replicate-from: cert-manager/wildcard-hxme-net