diff --git a/authentik/certificate.yaml b/authentik/certificate.yaml
index 7646a55..046ce3a 100644
--- a/authentik/certificate.yaml
+++ b/authentik/certificate.yaml
@@ -14,3 +14,20 @@ spec:
   usages:
   - digital signature
   - key encipherment
+---
+# The login of the Scouting MBG photos (immich), see blueprint-scouting.yaml.
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: auth-scoutingmbg-tls
+spec:
+  secretName: auth-scoutingmbg-tls
+  dnsNames:
+  - auth.scoutingmbg.nl
+  issuerRef:
+    group: cert-manager.io
+    kind: ClusterIssuer
+    name: prod-cluster-issuer
+  usages:
+  - digital signature
+  - key encipherment