diff --git a/dmz/internalproxy/templates/authentik.yaml b/dmz/internalproxy/templates/authentik.yaml
index 1e1e9fe..bd9aa77 100644
--- a/dmz/internalproxy/templates/authentik.yaml
+++ b/dmz/internalproxy/templates/authentik.yaml
@@ -31,6 +31,9 @@ kind: Certificate
 metadata:
   name: authentik-tls
 spec:
+  issuerRef:
+    name: vault-issuer
+    kind: ClusterIssuer
   secretName: authentik-tls
   commonName: "test.durp.info"
   dnsNames: