diff --git a/deploy/0-namespace.yaml b/deploy/0-namespace.yaml
new file mode 100644
index 0000000..44fbac3
--- /dev/null
+++ b/deploy/0-namespace.yaml
@@ -0,0 +1,5 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: mathy
diff --git a/deploy/1-certificate.yaml b/deploy/1-certificate.yaml
new file mode 100644
index 0000000..19fa61e
--- /dev/null
+++ b/deploy/1-certificate.yaml
@@ -0,0 +1,12 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: mathy-tls
+  namespace: mathy
+spec:
+  secretName: mathy-tls
+  dnsNames:
+    - 'crystalmath.tech'
+  issuerRef:
+    name: letsencrypt-ca
+    kind: ClusterIssuer
diff --git a/deploy/deploy.yaml b/deploy/2-deploy.yaml
similarity index 95%
rename from deploy/deploy.yaml
rename to deploy/2-deploy.yaml
index c581728..f8c29ac 100644
--- a/deploy/deploy.yaml
+++ b/deploy/2-deploy.yaml
@@ -3,6 +3,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: mathy
+  namespace: mathy
 spec:
   selector:
     matchLabels:
@@ -23,6 +24,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: mathy-api
+  namespace: mathy
 spec:
   selector:
     matchLabels:
@@ -46,7 +48,7 @@ spec:
                   key: host
                   optional: false
             - name: DATABASE_USERNAME
-              value: postgres
+              value: mathy
             - name: DATABASE_PASSWORD
               valueFrom:
                 secretKeyRef:
@@ -68,6 +70,7 @@ apiVersion: v1
 kind: Service
 metadata:
   name: mathy-api-service
+  namespace: mathy
 spec:
   ports:
     - name: http
@@ -81,6 +84,7 @@ apiVersion: v1
 kind: Service
 metadata:
   name: mathy-service
+  namespace: mathy
 spec:
   ports:
     - name: http
@@ -94,6 +98,7 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: mathy-ingress
+  namespace: mathy
   annotations:
     kubernetes.io/ingress.class: "nginx"
     nginx.ingress.kubernetes.io/ssl-redirect: "true"
diff --git a/package.json b/package.json
index 623b187..eb8333e 100644
--- a/package.json
+++ b/package.json
@@ -9,10 +9,10 @@
     "lint": "eslint . --ext .ts",
     "lint:fix": "eslint --fix . --ext .ts",
     "preview": "vite preview",
-    "cd:build": "pnpm run build && docker image build . -t ${DOCKER_REGISTRY}:glmdev/mathy",
-    "cd:push": "docker push ${DOCKER_REGISTRY}:glmdev/mathy",
-    "cd:deploy": "kubectl apply -f deploy/deploy.yaml",
-    "cd:rollout": "kubectl rollout restart deployment/mathy",
+    "cd:build": "pnpm run build && docker image build . -t ${DOCKER_REGISTRY}/glmdev/mathy",
+    "cd:push": "docker push ${DOCKER_REGISTRY}/glmdev/mathy",
+    "cd:deploy": "kubectl apply -f deploy/1-certificate.yaml -f deploy/2-deploy.yaml",
+    "cd:rollout": "kubectl rollout -n mathy restart deployment/mathy",
     "cd": "pnpm run cd:build && pnpm run cd:push && pnpm run cd:rollout"
   },
   "dependencies": {