diff --git a/deployments/home-server/authentik.yaml b/deployments/home-server/authentik.yaml
index 711680c..270c402 100644
--- a/deployments/home-server/authentik.yaml
+++ b/deployments/home-server/authentik.yaml
@@ -8,6 +8,14 @@ spec:
   url: https://charts.goauthentik.io/
   interval: 1h
 ---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: wildcard-hxme-net
+  namespace: home-server
+  annotations:
+    replicator.v1.mittwald.de/replicate-from: cert-manager/wildcard-hxme-net
+---
 apiVersion: helm.toolkit.fluxcd.io/v2
 kind: HelmRelease
 metadata:
@@ -32,11 +40,10 @@ spec:
     - kind: Secret
       name: authentik-values
   values:
-    server:
-      ingress:
-        annotations:
-          external-dns.alpha.kubernetes.io/hostname: auth.hxme.net
-        tls:
-          - secretName: wildcard-hxme-net
-            hosts:
-              - auth.hxme.net
+    ingress:
+      annotations:
+        external-dns.alpha.kubernetes.io/hostname: auth.hxme.net
+      tls:
+        - secretName: wildcard-hxme-net
+          hosts:
+            - auth.hxme.net