diff --git a/src/main/resources/nextcloud/certificate.yaml b/src/main/resources/nextcloud/certificate.yaml
index 0890ac5..c5546af 100644
--- a/src/main/resources/nextcloud/certificate.yaml
+++ b/src/main/resources/nextcloud/certificate.yaml
@@ -5,6 +5,8 @@ metadata:
   namespace: default
 spec:
   secretName: cloud-secret
+  duration: 2160h # 90d
+  renewBefore: 360h # 15d
   commonName: fqdn
   dnsNames:
   - fqdn