diff --git a/helm/templates/api/ingress.yaml b/helm/templates/api/ingress.yaml
index c3dbba2c..6da3930f 100644
--- a/helm/templates/api/ingress.yaml
+++ b/helm/templates/api/ingress.yaml
@@ -23,4 +23,10 @@ spec:
                 port:
                   number: 80
 
+  {{- if .Values.ingress.tls.enabled }}
+  tls:
+    - hosts:
+        - {{ .Values.ingress.host | quote }}
+      secretName: {{ required "ingress.tls.secretName" .Values.ingress.tls.secretName }}
+  {{- end }}
 {{- end }}
diff --git a/helm/values-production.yaml b/helm/values-production.yaml
index 291d6cc7..a580e44c 100644
--- a/helm/values-production.yaml
+++ b/helm/values-production.yaml
@@ -4,6 +4,9 @@ fullnameOverride: ifrcgo-alert-hub
 ingress:
   enabled: true
   className: nginx
+  tls:
+    enabled: true
+    secretName:
   # Needs to be defined at go-deploy
   # host: alerthub-stage-api.ifrc.org
 
diff --git a/helm/values-sandbox.yaml b/helm/values-sandbox.yaml
index 20e7a9cb..20fb8619 100644
--- a/helm/values-sandbox.yaml
+++ b/helm/values-sandbox.yaml
@@ -8,6 +8,9 @@ ingress:
   enabled: true
   host: alert-hub-sandbox.ifrc.org
   className: webapprouting.kubernetes.azure.com
+  tls:
+    enabled: true
+    secretName:
 
 postgresql:
   enabled: true
diff --git a/helm/values-staging.yaml b/helm/values-staging.yaml
index 429b087a..a4597bd5 100644
--- a/helm/values-staging.yaml
+++ b/helm/values-staging.yaml
@@ -4,6 +4,9 @@ fullnameOverride: ifrcgo-alert-hub
 ingress:
   enabled: true
   className: nginx
+  tls:
+    enabled: true
+    secretName:
   # Needs to be defined at go-deploy
   # host: alerthub-stage-api.ifrc.org
 
diff --git a/helm/values.yaml b/helm/values.yaml
index dbda29ca..4bd0f143 100644
--- a/helm/values.yaml
+++ b/helm/values.yaml
@@ -8,6 +8,9 @@ ingress:
   enabled: false
   host:
   className:
+  tls:
+    enabled: false
+    secretName:
 
 redis:
   enabled: true