diff --git a/infrastructure/external-secrets/cluster-secret-store.yaml b/infrastructure/external-secrets/cluster-secret-store.yaml
index 081b148..a9bb798 100644
--- a/infrastructure/external-secrets/cluster-secret-store.yaml
+++ b/infrastructure/external-secrets/cluster-secret-store.yaml
@@ -5,9 +5,11 @@ metadata:
 spec:
   provider:
     vault:
-      server: "http://10.100.30.11:8200" # Interne IP vom Docker Host
+      server: "https://10.100.30.11:8200" # HTTPS!
       path: "secret"
       version: "v2"
+      tls:
+        insecureSkipVerify: true # WICHTIG bei Self-Signed Certs
       auth:
         kubernetes:
           mountPath: "kubernetes"