diff --git a/infra/cert-manager/Makefile b/infra/cert-manager/Makefile
new file mode 100644
index 0000000..05b352e
--- /dev/null
+++ b/infra/cert-manager/Makefile
@@ -0,0 +1,6 @@
+install:
+	helm repo add cert-manager https://charts.jetstack.io
+	helm repo update cert-manager
+	helm upgrade --install -n cert-manager --create-namespace cert-manager cert-manager/cert-manager --version 1.17.0 -f values.yml
+
+	kubectl apply -f cluster-issuer.yml
diff --git a/infra/cert-manager/cluster-issuer.yml b/infra/cert-manager/cluster-issuer.yml
new file mode 100644
index 0000000..f00015b
--- /dev/null
+++ b/infra/cert-manager/cluster-issuer.yml
@@ -0,0 +1,14 @@
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt
+spec:
+  acme:
+    email: arek.dzski@gmail.com
+    server: https://acme-v02.api.letsencrypt.org/directory
+    solvers:
+      - http01:
+          ingress:
+            ingressClassName: nginx
+    privateKeySecretRef:
+      name: letsencrypt-key
diff --git a/infra/cert-manager/values.yml b/infra/cert-manager/values.yml
new file mode 100644
index 0000000..c526c4b
--- /dev/null
+++ b/infra/cert-manager/values.yml
@@ -0,0 +1,2 @@
+crds:
+  enabled: true