diff --git a/config/hemmelig/hemmelig-ingressroute.yaml b/config/hemmelig/hemmelig-ingressroute.yaml
index 3a381b4..a0e7184 100644
--- a/config/hemmelig/hemmelig-ingressroute.yaml
+++ b/config/hemmelig/hemmelig-ingressroute.yaml
@@ -22,6 +22,8 @@ kind: IngressRoute
 metadata:
   name: hemmelig-external
   namespace: kube-system
+  annotation:
+    cert-manager.io/cluster-issuer: "lets-encrypt"
 spec:
   entryPoints:
     - websecure