diff --git a/argocd-nginx/base/argocd-cert-issuer.yaml b/argocd-nginx/base/argocd-cert-issuer.yaml
new file mode 100644
index 0000000..bc70328
--- /dev/null
+++ b/argocd-nginx/base/argocd-cert-issuer.yaml
@@ -0,0 +1,15 @@
+apiVersion: cert-manager.io/v1
+kind: Issuer
+metadata:
+  name: letsencrypt
+spec:
+  acme:
+    server: https://acme-v02.api.letsencrypt.org/directory
+    email: drive@sunet.se
+    privateKeySecretRef:
+      name: letsencrypt
+    solvers:
+      - http01:
+          ingress: 
+            class: nginx
+
diff --git a/argocd-nginx/base/kustomization.yaml b/argocd-nginx/base/kustomization.yaml
index 6802995..a5d0656 100644
--- a/argocd-nginx/base/kustomization.yaml
+++ b/argocd-nginx/base/kustomization.yaml
@@ -1,2 +1,3 @@
 resources:
   - argocd-ingress.yaml
+  - argocd-cert-issuer.yaml
diff --git a/argocd-nginx/overlays/test/vr/argocd-ingress.yaml b/argocd-nginx/overlays/test/vr/argocd-ingress.yaml
index 54c3d2e..0364186 100644
--- a/argocd-nginx/overlays/test/vr/argocd-ingress.yaml
+++ b/argocd-nginx/overlays/test/vr/argocd-ingress.yaml
@@ -3,6 +3,9 @@ kind: Ingress
 metadata:
   name: argocd-ingress
   namespace: argocd
+  annotations:
+    cert-manager.io/issuer: "letsencrypt"
+    acme.cert-manager.io/http01-edit-in-place: "true"
 spec:
   defaultBackend:
     service: