diff --git a/apps/bookstack/bookstack.yaml b/apps/bookstack/bookstack.yaml
index 34d7598..339772c 100644
--- a/apps/bookstack/bookstack.yaml
+++ b/apps/bookstack/bookstack.yaml
@@ -38,7 +38,7 @@ spec:
             - name: TZ
               value: "America/Indiana/Indianapolis"
             - name: APP_URL
-              value: "http://docs.home.lan"
+              value: "https://docs.home.lan"
             - name: APP_KEY
               valueFrom:
                 secretKeyRef:
diff --git a/apps/bookstack/ingress.yaml b/apps/bookstack/ingress.yaml
index 184d0d6..8597a0f 100644
--- a/apps/bookstack/ingress.yaml
+++ b/apps/bookstack/ingress.yaml
@@ -3,8 +3,14 @@ kind: Ingress
 metadata:
   name: bookstack
   namespace: bookstack
+  annotations:
+    cert-manager.io/cluster-issuer: home-lab-ca
 spec:
   ingressClassName: nginx
+  tls:
+    - hosts:
+        - docs.home.lan
+      secretName: docs-home-lan-tls
   rules:
     - host: docs.home.lan
       http: