diff --git a/clusters/cl01tl/standalone/cilium/templates/certificate.yaml b/clusters/cl01tl/standalone/cilium/templates/certificate.yaml
new file mode 100644
index 000000000..fe73fa5ce
--- /dev/null
+++ b/clusters/cl01tl/standalone/cilium/templates/certificate.yaml
@@ -0,0 +1,22 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: wildcard-tls-alexlebens-net
+  namespace: cilium-secrets
+  labels:
+    app.kubernetes.io/name: wildcard-tls-alexlebens-net
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/version: {{ .Chart.AppVersion }}
+    app.kubernetes.io/component: network
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretName: wildcard-tls-alexlebens-net
+  duration: 2160h0m0s
+  renewBefore: 360h0m0s
+  dnsNames:
+    - "*.alexlebens.net"
+  issuerRef:
+    name: letsencrypt-issuer
+    kind: ClusterIssuer
+  commonName: "*.alexlebens.net"
+