diff --git a/deploy/keycloak/keycloak-ingress.yaml b/deploy/keycloak/keycloak-ingress.yaml
index 6b5a193..2beb292 100644
--- a/deploy/keycloak/keycloak-ingress.yaml
+++ b/deploy/keycloak/keycloak-ingress.yaml
@@ -2,10 +2,15 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: keycloak
+  annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-prod"
+    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
 spec:
+  ingressClassName: nginx
   tls:
     - hosts:
         - sso.panic.haus
+      secretName: keycloak-tls
   rules:
     - host: sso.panic.haus
       http: