diff --git a/base/ingress.k b/base/ingress.k
index b97494c..7057670 100644
--- a/base/ingress.k
+++ b/base/ingress.k
@@ -12,6 +12,9 @@ httpServiceRender = lambda h: HTTPService {
         kind = "Ingress"
         metadata = {
             name = h.service
+            annotations = {
+                "cert-manager.io/issuer": "letsencrypt"
+            }
         }
         spec = {
             rules = [{