diff --git a/infra/values/base/backstage-values.yaml b/infra/values/base/backstage-values.yaml
index 67c7617..10a8404 100644
--- a/infra/values/base/backstage-values.yaml
+++ b/infra/values/base/backstage-values.yaml
@@ -102,6 +102,10 @@ upstream:
     className: traefik
     annotations:
       traefik.ingress.kubernetes.io/router.entrypoints: websecure
+      cert-manager.io/cluster-issuer: letsencrypt-prod
+    tls:
+      enabled: true
+      secretName: backstage-tls
 
   postgresql:
     enabled: true