diff --git a/kubernetes/apps/networking/ingress-nginx/app/helmrelease.yaml b/kubernetes/apps/networking/ingress-nginx/app/helmrelease.yaml
index ed3a988f2..d45b79f7a 100644
--- a/kubernetes/apps/networking/ingress-nginx/app/helmrelease.yaml
+++ b/kubernetes/apps/networking/ingress-nginx/app/helmrelease.yaml
@@ -57,7 +57,7 @@ spec:
           namespaceSelector:
             any: true
       extraArgs:
-        default-ssl-certificate: "networking/${SECRET_DOMAIN/./-}-staging-tls"
+        default-ssl-certificate: "networking/${SECRET_DOMAIN/./-}-production-tls"
       resources:
         requests:
           cpu: 10m
diff --git a/kubernetes/apps/networking/ingress-nginx/certificates/kustomization.yaml b/kubernetes/apps/networking/ingress-nginx/certificates/kustomization.yaml
index 03e391d9f..8f7469ef2 100644
--- a/kubernetes/apps/networking/ingress-nginx/certificates/kustomization.yaml
+++ b/kubernetes/apps/networking/ingress-nginx/certificates/kustomization.yaml
@@ -7,4 +7,4 @@ resources:
   # certificate resource below and update the ingress-nginx helm chart with new production
   # certificate name. This is to prevent you from getting rate-limited on configuration that might
   # not be valid on bootstrap. No need to comment out the staging certificate they can coexist.
-  # - ./production.yaml
+  - ./production.yaml