diff --git a/k8s/system/kustomization.yaml b/k8s/system/kustomization.yaml
new file mode 100644
index 0000000..465b523
--- /dev/null
+++ b/k8s/system/kustomization.yaml
@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - secrets.yaml
+  - traefik-default-cert.yaml
+
diff --git a/k8s/system/traefik-default-cert.yaml b/k8s/system/traefik-default-cert.yaml
new file mode 100644
index 0000000..d6db219
--- /dev/null
+++ b/k8s/system/traefik-default-cert.yaml
@@ -0,0 +1,24 @@
+apiVersion: traefik.io/v1alpha1
+kind: TLSStore
+metadata:
+  name: default
+  namespace: kube-system
+spec:
+  defaultCertificate:
+    secretName: default-certificate
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: traefik-default
+  namespace: kube-system
+spec:
+  issuerRef:
+    kind: ClusterIssuer
+    name: letsencrypt
+  secretName: default-certificate
+  dnsNames:
+  - '*.k8s.home.finn.io'
+  - '*.home.finn.io'
+  - '*.finn.io'
+  - '*.janky.solutions'