diff --git a/argocd/apps/hemmelig/hemmelig-certificate.yaml b/argocd/apps/hemmelig/hemmelig-certificate.yaml
new file mode 100644
index 0000000..36c42bc
--- /dev/null
+++ b/argocd/apps/hemmelig/hemmelig-certificate.yaml
@@ -0,0 +1,13 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: hemmelig-cert
+  namespace: default
+spec:
+  secretName: hemmelig-tls
+  issuerRef:
+    name: lets-encrypt
+    kind: ClusterIssuer
+  commonName: paste.innovation-hub-niedersachsen.de
+  dnsNames:
+    - paste.innovation-hub-niedersachsen.de
diff --git a/argocd/apps/hemmelig/hemmelig-ingress.yaml b/argocd/apps/hemmelig/hemmelig-ingress.yaml
new file mode 100644
index 0000000..5f2d22c
--- /dev/null
+++ b/argocd/apps/hemmelig/hemmelig-ingress.yaml
@@ -0,0 +1,16 @@
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: hemmelig-docker-route
+  namespace: default
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`paste.innovation-hub-niedersachsen.de`)
+      kind: Rule
+      services:
+        - name: hemmelig-docker
+          port: 80
+  tls:
+    secretName: hemmelig-tls
diff --git a/argocd/apps/hemmelig/hemmelig-service.yaml b/argocd/apps/hemmelig/hemmelig-service.yaml
new file mode 100644
index 0000000..e69de29