diff --git a/deployment/ingress.yaml b/deployment/ingress.yaml
index bd684e9..dd1f281 100644
--- a/deployment/ingress.yaml
+++ b/deployment/ingress.yaml
@@ -4,9 +4,13 @@ metadata:
   name: drawio
   namespace: drawio
   annotations:
-    nginx.ingress.kubernetes.io/ssl-redirect: "false"
+    cert-manager.io/cluster-issuer: letsencrypt-prod
 spec:
   ingressClassName: nginx
+  tls:
+    - hosts:
+        - drawio.szymi.ddns.net
+      secretName: drawio-tls
   rules:
   - host: drawio.szymi.ddns.net
     http: