diff --git a/authentik/helmrelease-authentik.yaml b/authentik/helmrelease-authentik.yaml
index 31c2593..ce48c3e 100644
--- a/authentik/helmrelease-authentik.yaml
+++ b/authentik/helmrelease-authentik.yaml
@@ -40,6 +40,11 @@ spec:
               key: AUTHENTIK_EMAIL__PASSWORD
 
     authentik:
+      outposts:
+        kubernetes_ingress_secret_name: letsencrypt-wildcard-cert-michaelthomson.dev
+        kubernetes_ingress_annotations:
+          traefik.ingress.kubernetes.io/router.tls: "true"
+          traefik.ingress.kubernetes.io/router.entrypoints: websecure
       email:
         host: mail.michaelthomson.dev
         port: 465