diff --git a/k8s/ingress.yaml b/k8s/ingress.yaml
index 3ac0989..cdddc40 100644
--- a/k8s/ingress.yaml
+++ b/k8s/ingress.yaml
@@ -1,6 +1,8 @@
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
+  annotations:
+    kubernetes.io/tls-acme: "true"
   labels:
     app.kubernetes.io/name: forgejo-ingress
     app.kubernetes.io/instance: forgejo
@@ -18,4 +20,8 @@ spec:
             port:
               number: 80
         path: /
-        pathType: Prefix
\ No newline at end of file
+        pathType: Prefix
+  tls:
+    - hosts:
+        - git.svc.neuber.io
+      secretName: forgejo-tls-key