diff --git a/apps/keycloak/base/keycloak-ingress.yaml b/apps/keycloak/base/keycloak-ingress.yaml
index 29d61a6..606cdcb 100644
--- a/apps/keycloak/base/keycloak-ingress.yaml
+++ b/apps/keycloak/base/keycloak-ingress.yaml
@@ -1,11 +1,15 @@
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-issuer
   name: keycloak
 spec:
   tls:
     - hosts:
         - keycloak.nc.landry.land
+      secretName: keycloak-tls
+
   rules:
     - host: keycloak.nc.landry.land
       http: