diff --git a/apps/platform-config.yaml b/apps/platform-config.yaml
new file mode 100644
index 0000000..d05c2c9
--- /dev/null
+++ b/apps/platform-config.yaml
@@ -0,0 +1,17 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: platform-config
+  namespace: argo-cd
+spec:
+  project: default
+  source:
+    repoURL: git@git.jrdn.dev:JamesAllenby/homelab-platform.git
+    targetRevision: main
+    path: manifests
+  destination:
+    server: https://kubernetes.default.svc
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
diff --git a/manifests/cluster-issuer.yaml b/manifests/cluster-issuer.yaml
new file mode 100644
index 0000000..06cea7a
--- /dev/null
+++ b/manifests/cluster-issuer.yaml
@@ -0,0 +1,16 @@
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt
+spec:
+  acme:
+    server: https://acme-v02.api.letsencrypt.org/directory
+    email: JamesAllenby@protonmail.com
+    privateKeySecretRef:
+      name: letsencrypt-account-key
+    solvers:
+      - http01:
+          gatewayHTTPRoute:
+            parentRefs:
+              - name: traefik-gateway
+                namespace: traefik
diff --git a/manifests/gateway.yaml b/manifests/gateway.yaml
new file mode 100644
index 0000000..af15dc1
--- /dev/null
+++ b/manifests/gateway.yaml
@@ -0,0 +1,45 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: GatewayClass
+metadata:
+  name: traefik
+spec:
+  controllerName: traefik.io/gateway-controller
+---
+apiVersion: gateway.networking.k8s.io/v1
+kind: Gateway
+metadata:
+  name: traefik-gateway
+  namespace: traefik
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt
+spec:
+  gatewayClassName: traefik
+  listeners:
+    - name: web
+      port: 80
+      protocol: HTTP
+      allowedRoutes:
+        namespaces:
+          from: All
+    - name: websecure-auth
+      hostname: auth.solidish.dev
+      port: 443
+      protocol: HTTPS
+      tls:
+        mode: Terminate
+        certificateRefs:
+          - name: auth-solidish-dev-tls
+      allowedRoutes:
+        namespaces:
+          from: All
+    - name: websecure-grafana
+      hostname: grafana.solidish.dev
+      port: 443
+      protocol: HTTPS
+      tls:
+        mode: Terminate
+        certificateRefs:
+          - name: grafana-solidish-dev-tls
+      allowedRoutes:
+        namespaces:
+          from: All