diff --git a/template/stacks/observability/victoria-k8s-stack/manifests/vmauth.yaml b/template/stacks/observability/victoria-k8s-stack/manifests/vmauth.yaml
index 8aa4680..cc8e335 100644
--- a/template/stacks/observability/victoria-k8s-stack/manifests/vmauth.yaml
+++ b/template/stacks/observability/victoria-k8s-stack/manifests/vmauth.yaml
@@ -7,7 +7,13 @@ spec:
   selectAllByDefault: true
   ingress:
     class_name: nginx
+    annotations:
+      nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
+      cert-manager.io/cluster-issuer: main
     host: o12y.penguin-observability.think-ahead.cloud
+    tlsHosts:
+      - o12y.penguin-observability.think-ahead.cloud
+    tlsSecretName: vmauth-tls-secret
 
 ---