diff --git a/Kubernetes/Traefik-Crowdsec-PiHole/Helm/Traefik/Cert-Manager/Issuers/secret-cf-token.yaml b/Kubernetes/Traefik-Crowdsec-PiHole/Helm/Traefik/Cert-Manager/Issuers/secret-cf-token.yaml
new file mode 100644
index 0000000..bbd1c1b
--- /dev/null
+++ b/Kubernetes/Traefik-Crowdsec-PiHole/Helm/Traefik/Cert-Manager/Issuers/secret-cf-token.yaml
@@ -0,0 +1,10 @@
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: cloudflare-token-secret
+  namespace: cert-manager
+type: Opaque
+# WARNING! You need an API token, not a Global API key: https://cert-manager.io/docs/configuration/acme/dns01/cloudflare/#api-tokens
+stringData:
+  cloudflare-token: YOUR-RANDOM-TOKEN