diff --git a/templates/xpub-collabra-tls-secret.yaml b/templates/xpub-collabra-tls-secret.yaml
new file mode 100644
index 0000000000000000000000000000000000000000..95e90cd774016567564160556ee16aadb70e78c4
--- /dev/null
+++ b/templates/xpub-collabra-tls-secret.yaml
@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Secret
+type: kubernetes.io/tls
+metadata:
+  name: ${CI_ENVIRONMENT_SLUG}-tls
+  namespace: ${KUBE_NAMESPACE}
+  labels:
+    env: ${CI_ENVIRONMENT_SLUG}
+    branch: ${CI_COMMIT_REF_NAME}
+data:
+  tls.crt:
+  tls.key:
+# Will be populated by kube-lego
diff --git a/templates/xpub-ui-tls-secret.yaml b/templates/xpub-ui-tls-secret.yaml
new file mode 100644
index 0000000000000000000000000000000000000000..95e90cd774016567564160556ee16aadb70e78c4
--- /dev/null
+++ b/templates/xpub-ui-tls-secret.yaml
@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Secret
+type: kubernetes.io/tls
+metadata:
+  name: ${CI_ENVIRONMENT_SLUG}-tls
+  namespace: ${KUBE_NAMESPACE}
+  labels:
+    env: ${CI_ENVIRONMENT_SLUG}
+    branch: ${CI_COMMIT_REF_NAME}
+data:
+  tls.crt:
+  tls.key:
+# Will be populated by kube-lego