diff --git a/argocd-apps/add-ons/traefik.yaml b/argocd-apps/add-ons/traefik.yaml
index 6aff757..dad1aa1 100644
--- a/argocd-apps/add-ons/traefik.yaml
+++ b/argocd-apps/add-ons/traefik.yaml
@@ -40,6 +40,17 @@ spec:
                   - kind: Secret
                     name: wildcard-whyredfire-dev
                     group: ""
+              websecure-dpdns:
+                port: 8443
+                protocol: HTTPS
+                mode: Terminate
+                hostname: "*.whyredfire.dpdns.org"
+                namespacePolicy:
+                  from: All
+                certificateRefs:
+                  - kind: Secret
+                    name: wildcard-whyredfire-dpdns-org
+                    group: ""
       repoURL: https://traefik.github.io/charts
       targetRevision: 41.2.0
     - path: infra/traefik
diff --git a/infra/traefik/kustomization.yaml b/infra/traefik/kustomization.yaml
index 2e34d9f..280e75f 100644
--- a/infra/traefik/kustomization.yaml
+++ b/infra/traefik/kustomization.yaml
@@ -2,3 +2,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - wildcard-whyredfire-dev.yaml
+  - wildcard-whyredfire-dpdns-org.yaml
diff --git a/infra/traefik/wildcard-whyredfire-dpdns-org.yaml b/infra/traefik/wildcard-whyredfire-dpdns-org.yaml
new file mode 100644
index 0000000..b68f3d6
--- /dev/null
+++ b/infra/traefik/wildcard-whyredfire-dpdns-org.yaml
@@ -0,0 +1,14 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: wildcard-whyredfire-dpdns-org
+  namespace: traefik
+spec:
+  dnsNames:
+    - '*.whyredfire.dpdns.org'
+  issuerRef:
+    kind: ClusterIssuer
+    name: letsencrypt-prod
+  privateKey:
+    rotationPolicy: Always
+  secretName: wildcard-whyredfire-dpdns-org