diff --git a/cert-manager/helm-cert-manager.yaml b/apps/templates/helm-cert-manager.yaml
similarity index 90%
rename from cert-manager/helm-cert-manager.yaml
rename to apps/templates/helm-cert-manager.yaml
index 3087801..8ca7a2c 100644
--- a/cert-manager/helm-cert-manager.yaml
+++ b/apps/templates/helm-cert-manager.yaml
@@ -3,6 +3,8 @@ kind: Application
 metadata:
   name: helm-cert-manager
   namespace: argocd
+  finalizers:
+  - resources-finalizer.argocd.argoproj.io
 spec:
   destination:
     namespace: cert-manager
diff --git a/cert-manager/prod-cluster-issuer.yaml b/cert-manager/prod-cluster-issuer.yaml
new file mode 100644
index 0000000..b0f6adb
--- /dev/null
+++ b/cert-manager/prod-cluster-issuer.yaml
@@ -0,0 +1,18 @@
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: prod-cluster-issuer
+spec:
+  acme:
+    # The ACME server URL
+    server: https://acme-v02.api.letsencrypt.org/directory
+    # Email address used for ACME registration
+    email: ruben.hensen@proton.me
+    # Name of a secret used to store the ACME account private key
+    privateKeySecretRef:
+      name: letsencrypt-prod
+    # Enable the HTTP-01 challenge provider
+    solvers:
+      - http01:
+          ingress:
+            ingressClassName: nginx
\ No newline at end of file