diff --git a/cluster/platform/openviking/values.yaml b/cluster/platform/openviking/values.yaml
index 89055ee..3d474c0 100644
--- a/cluster/platform/openviking/values.yaml
+++ b/cluster/platform/openviking/values.yaml
@@ -53,8 +53,8 @@ ingress:
   enabled: true
   className: nginx
   annotations:
-    # Internal cert-manager cluster issuer (self-signed or internal CA)
-    cert-manager.io/cluster-issuer: "letsencrypt-internal"
+    # Internal cert-manager cluster issuer (DNS-01 via Cloudflare)
+    cert-manager.io/cluster-issuer: "letsencrypt-prod"
     # Block external DNS registration (internal only)
     external-dns.alpha.kubernetes.io/enabled: "false"
   hosts: