diff --git a/projects/ingress-external/values/ingress-external.yaml b/projects/ingress-external/values/ingress-external.yaml
index 7d5be3af..025d624e 100644
--- a/projects/ingress-external/values/ingress-external.yaml
+++ b/projects/ingress-external/values/ingress-external.yaml
@@ -12,11 +12,10 @@ kubernetesIngress:
   - drone
   - nextcloud
   - gitea
-  - cert-manager
 
 ports:
   web:
-#    redirectTo: websecure
+    redirectTo: websecure
   websecure:
     tls:
       enabled: true
@@ -42,6 +41,8 @@ tlsOptions:
       - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
       - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
 
+persistence:
+  enabled: true
 
 service:
   enabled: true
diff --git a/resources/manifests/clusterissuer.yaml b/resources/manifests/clusterissuer.yaml
index 2f1b79d4..303d8942 100644
--- a/resources/manifests/clusterissuer.yaml
+++ b/resources/manifests/clusterissuer.yaml
@@ -19,3 +19,10 @@ spec:
     - http01:
         ingress:
           class: ingress-external-traefik
+          ingressTemplate:
+            metadata:
+              labels:
+                environment: external
+              annotations:
+                traefik.ingress.kubernetes.io/frontend-entry-points: "web"
+                kubernetes.io/ingress.class: ingress-external