diff --git a/apps/templates/authentik.yaml b/apps/templates/authentik.yaml
index 9d3c590..caa27d3 100644
--- a/apps/templates/authentik.yaml
+++ b/apps/templates/authentik.yaml
@@ -26,6 +26,9 @@ spec:
         ingress:
           enabled: true
           ingressClassName: traefik
+          annotations:
+            cert-manager.io/acme-challenge-type: dns01
+            cert-manager.io/cluster-issuer: roxedus.com-cloudflare
           hosts:
             - host: authentik.roxedus.com
               paths: