diff --git a/whoami/base/whoami-ingress.yaml b/whoami/base/whoami-ingress.yaml
index e637d4c..42652e9 100644
--- a/whoami/base/whoami-ingress.yaml
+++ b/whoami/base/whoami-ingress.yaml
@@ -1,3 +1,15 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: whoami.mziesel.nl-cert
+spec:
+  secretName: whoami.mziesel.nl-secret
+  issuerRef:
+    name: mziesel-ca-issuer
+    kind: ClusterIssuer
+  dnsNames:
+    - whoami.mziesel.nl
+---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
@@ -9,4 +21,5 @@ spec:
     services:
     - name: whoami
       port: web
-  tls: {}
+  tls:
+    secretName: whoami.mziesel.nl-secret