diff --git a/apps/cert-manager/overlays/system/clusterissuer.yaml b/apps/cert-manager/overlays/system/clusterissuer.yaml
index b699db6..de821d8 100644
--- a/apps/cert-manager/overlays/system/clusterissuer.yaml
+++ b/apps/cert-manager/overlays/system/clusterissuer.yaml
@@ -5,7 +5,7 @@ metadata:
 spec:
   acme:
     server: https://acme-v02.api.letsencrypt.org/directory
-    email: david@dmwl.net
+    email: letsencrypt.homelab@davad.me
     privateKeySecretRef:
       name: letsencrypt-issuer
     solvers:
diff --git a/apps/portfolio/overlays/staging-sites/ingress.yaml b/apps/portfolio/overlays/staging-sites/ingress.yaml
index e651ebf..7c55bdd 100644
--- a/apps/portfolio/overlays/staging-sites/ingress.yaml
+++ b/apps/portfolio/overlays/staging-sites/ingress.yaml
@@ -6,8 +6,8 @@ metadata:
     app.kubernetes.io/name: portfolio
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-issuer
-    nginx.ingress.kubernetes.io/whitelist-source-range: 192.168.1.1/16
 
+    nginx.ingress.kubernetes.io/whitelist-source-range: 192.168.1.1/16
     nginx.ingress.kubernetes.io/enable-cors: "true"
     nginx.ingress.kubernetes.io/cors-allow-origin: "https://us-assets.i.posthog.com"
 
@@ -15,12 +15,11 @@ metadata:
     gethomepage.dev/name: Portfolio - Staging
     gethomepage.dev/group: Sites
     gethomepage.dev/href: https://portfolio-staging.int.nc.landry.land
-    # gethomepage.dev/description:
-    # gethomepage.dev/icon: syncthing
 spec:
   tls:
     - hosts:
         - "portfolio-staging.int.nc.landry.land"
+      secretName: staging-portfolio-tls
   rules:
     - host: "portfolio-staging.int.nc.landry.land"
       http: