diff --git a/media/prowlarr.yaml b/media/prowlarr.yaml
index 9b04507..2032748 100644
--- a/media/prowlarr.yaml
+++ b/media/prowlarr.yaml
@@ -80,8 +80,14 @@ kind: Ingress
 metadata:
   name: prowlarr-ingress
   namespace: media
+  annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-prod"
 spec:
   ingressClassName: haproxy
+  tls:
+    - secretName: prowlarr-ingress-tls
+      hosts:
+        - prowlarr.ntwl.xyz
   rules:
     - host: prowlarr.ntwl.xyz
       http:
diff --git a/media/radarr.yaml b/media/radarr.yaml
index 0a7cac6..5a0f47c 100644
--- a/media/radarr.yaml
+++ b/media/radarr.yaml
@@ -85,8 +85,14 @@ kind: Ingress
 metadata:
   name: radarr-ingress
   namespace: media
+  annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-prod"
 spec:
   ingressClassName: haproxy
+  tls:
+    - secretName: radarr-ingress-tls
+      hosts:
+        - radarr.ntwl.xyz
   rules:
     - host: radarr.ntwl.xyz
       http:
diff --git a/media/sabnzbd.yaml b/media/sabnzbd.yaml
index e7502f1..ac3d39d 100644
--- a/media/sabnzbd.yaml
+++ b/media/sabnzbd.yaml
@@ -94,8 +94,14 @@ kind: Ingress
 metadata:
   name: sabnzbd-ingress
   namespace: media
+  annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-prod"
 spec:
   ingressClassName: haproxy
+  tls:
+    - secretName: sabnzbd-ingress-tls
+      hosts:
+        - sabnzbd.ntwl.xyz
   rules:
     - host: sabnzbd.ntwl.xyz
       http: