diff --git a/infrastructure/certmanager/helmrelease.yaml b/infrastructure/certmanager/helmrelease.yaml
new file mode 100644
index 0000000..265b9d4
--- /dev/null
+++ b/infrastructure/certmanager/helmrelease.yaml
@@ -0,0 +1,19 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cert-manager
+  namespace: cert-manager
+spec:
+  interval: 15m
+  releaseName: cert-manager
+  chart:
+    spec:
+      chart: cert-manager
+      version: v1.20.0
+      sourceRef:
+        kind: HelmRepository
+        name: cert-manager
+        namespace: flux-system
+#  values:
+    # keep minimal to start
+#    replicaCount: 1
diff --git a/infrastructure/certmanager/kustomization.yaml b/infrastructure/certmanager/kustomization.yaml
new file mode 100644
index 0000000..0370974
--- /dev/null
+++ b/infrastructure/certmanager/kustomization.yaml
@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - namespace.yaml
+  - helmrelease.yaml
diff --git a/infrastructure/certmanager/namespace.yaml b/infrastructure/certmanager/namespace.yaml
new file mode 100644
index 0000000..c90416f
--- /dev/null
+++ b/infrastructure/certmanager/namespace.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: cert-manager
diff --git a/infrastructure/certmanager/values.yaml b/infrastructure/certmanager/values.yaml
new file mode 100644
index 0000000..8d93013
--- /dev/null
+++ b/infrastructure/certmanager/values.yaml
@@ -0,0 +1 @@
+#yes
diff --git a/infrastructure/sources/jetstack.yaml b/infrastructure/sources/jetstack.yaml
new file mode 100644
index 0000000..1b4b540
--- /dev/null
+++ b/infrastructure/sources/jetstack.yaml
@@ -0,0 +1,8 @@
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: cert-manager
+  namespace: flux-system
+spec:
+  interval: 12h
+  url: https://charts.jetstack.io
diff --git a/infrastructure/sources/kustomization.yaml b/infrastructure/sources/kustomization.yaml
index da6548e..42cc51f 100644
--- a/infrastructure/sources/kustomization.yaml
+++ b/infrastructure/sources/kustomization.yaml
@@ -5,3 +5,4 @@ resources:
 - wikijs.yaml
 - bitwarden.yaml
 - eso.yaml
+- jetstatck.yaml