diff --git a/deployments/auth/authentik.yaml b/deployments/auth/authentik.yaml
index f143fa5..ced40ed 100644
--- a/deployments/auth/authentik.yaml
+++ b/deployments/auth/authentik.yaml
@@ -13,6 +13,14 @@ spec:
   url: https://charts.goauthentik.io/
   interval: 1h
 ---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: wildcard-hxme-net
+  namespace: authentik
+  annotations:
+    replicator.v1.mittwald.de/replicate-from: cert-manager/wildcard-hxme-net
+---
 apiVersion: helm.toolkit.fluxcd.io/v2
 kind: HelmRelease
 metadata:
@@ -40,3 +48,7 @@ spec:
     ingress:
       annotations:
         external-dns.alpha.kubernetes.io/hostname: auth.hxme.net
+      tls:
+        - secretName: wildcard-hxme-net
+          hosts:
+            - auth.hxme.net