diff --git a/sso-mfa/k8s/authelia/ingress.yaml b/sso-mfa/k8s/authelia/ingress.yaml
index a8223c4..0dd9aea 100644
--- a/sso-mfa/k8s/authelia/ingress.yaml
+++ b/sso-mfa/k8s/authelia/ingress.yaml
@@ -20,6 +20,7 @@ metadata:
     net-kingdom/component: sso
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-prod
+    cert-manager.io/duration: 2160h
 spec:
   ingressClassName: traefik
   rules: