diff --git a/badhouseplants/values/values.istio-gateway-resources.yaml b/badhouseplants/values/values.istio-gateway-resources.yaml
index adb884f..9349206 100644
--- a/badhouseplants/values/values.istio-gateway-resources.yaml
+++ b/badhouseplants/values/values.istio-gateway-resources.yaml
@@ -1,3 +1,22 @@
+certificate:
+  enabled: true
+  certificate: 
+    - name: nrodionov-wildcard
+      secretName: nrodionov-wildcard-tls
+      issuer:
+        kind: ClusterIssuer
+        name: badhouseplants-issuer
+      dnsNames:
+        - nrodionov.info
+        - "*.nrodionov.info"
+    - name: badhouseplants-wildcard
+      secretName: badhouseplants-wildcard-tls
+      issuer:
+        kind: ClusterIssuer
+        name: badhouseplants-issuer
+      dnsNames:
+        - badhouseplants.net
+        - "*.badhouseplants.net"
 istio-gateway:
   enabled: true
   gateways:
@@ -32,7 +51,7 @@ istio-gateway:
             number: 80
             protocol: HTTP2
           tls:
-            httpsRedirect: false
+            httpsRedirect: true
         - hosts:
           - nrodionov.info
           - dev.nrodionov.info
diff --git a/releases.yaml b/releases.yaml
index e09b05f..b88172b 100644
--- a/releases.yaml
+++ b/releases.yaml
@@ -185,6 +185,7 @@ templates:
     version: 2.0.0
     inherit:
       - template: ext-istio-gateway
+      - template: ext-certificate
       - template: default-env-values
 
   istiod: &istiod