diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 6280b964..ba6edba3 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -317,6 +317,7 @@ deploy:
     - export CI_PVC_SC=${CI_PVC_SC:-"${CI_PVC_SC_LOCAL:-local-path}"}
     - export CI_REPLICAS=${CI_REPLICAS_REVIEW:-${CI_REPLICAS:-2}}
     - export CI_APP_NAME=${CI_APP_NAME:-Engelsystem}
+    - export CI_CLUSTER_ISSUER=${CI_CLUSTER_ISSUER:-letsencrypt}
 
     - cp deployment.tpl.yaml deployment.yaml
     - for env in ${!CI_*}; do sed -i "s#<${env}>#$(echo "${!env}"|head -n1)#g" deployment.yaml; done
diff --git a/deployment.tpl.yaml b/deployment.tpl.yaml
index e162847b..7cae375e 100644
--- a/deployment.tpl.yaml
+++ b/deployment.tpl.yaml
@@ -186,6 +186,7 @@ metadata:
   annotations:
     kubernetes.io/tls-acme: 'true'
     kubernetes.io/ingress.class: 'nginx'
+    cert-manager.io/cluster-issuer: <CI_CLUSTER_ISSUER>
     nginx.ingress.kubernetes.io/rewrite-target: /$1
   labels:
     app: <CI_PROJECT_PATH_SLUG>