diff --git a/infrastructure/cert-manager/hetzner-dns-api-token-secret.yaml b/infrastructure/cert-manager/hetzner-dns-api-token-secret.yaml
index e8732d5..65397bd 100644
--- a/infrastructure/cert-manager/hetzner-dns-api-token-secret.yaml
+++ b/infrastructure/cert-manager/hetzner-dns-api-token-secret.yaml
@@ -1,34 +1,34 @@
 apiVersion: v1
 kind: Secret
 metadata:
-    name: hetzner-dns-api-token
+    name: hetzner-secret
     namespace: cert-manager
 type: Opaque
 stringData:
-    token: ENC[AES256_GCM,data:/q+htxkBlasprvVO3GjL8EAmNGLBZcqd4k96c/eVU3Y=,iv:pOJc+J8Q0rnPprkp372CcQDQ0RO0ENKLPqmnf3KzXQk=,tag:Rw6S+CzTJ3VlOckOLZ4naA==,type:str]
+    api-key: ENC[AES256_GCM,data:iYj5AS1UY77fC7nxk/yctC3f+g59NJ744+DS009kUQM=,iv:J/cKz6M3w5sM04GqJ5K+JwBoOOjaER+arykc60eztCk=,tag:dAnHwnXVEdKHDusu8VgWfA==,type:str]
 sops:
-    lastmodified: "2025-05-25T10:35:11Z"
-    mac: ENC[AES256_GCM,data:tHl5WGev15r18SbtIeyx0Xs3VgrG1OejsyxCC29CC1XabQn5Xx3E2VKsMUfpKyzQY0OIICttqRGlWRqVBCZEDZqNrohzS3gbyK9lXAbLGTsYbUTHWsjdDPzMpfa+bxmNfbrBkNjG60gMNvXygCywVi7JM2YSJVOomq1KUAhn69Y=,iv:LJqNhjtcU4f5gNUElvUrZpmwH5IwkDABC45HxOIYXDU=,tag:q/Yox5t//+yLPq7GQeUMFQ==,type:str]
+    lastmodified: "2025-05-25T12:00:23Z"
+    mac: ENC[AES256_GCM,data:RpN7bXCBDaG4zbHty2l2pZdvkCHP8LQEhHNE56Thvs3fecgqUDfn/JTb4F+IsdUTbSj68jE8hZhNK2oVH7KIkoGfMv6NUGaQo0vGU9cTAN+juaFrHgEGyRc+deazB7hLT2cs87V96v7XjfCA4bL+F0eFINvOX/TZSu6sNoFAYC8=,iv:oKDwGI3Gb/rAIs6DANMyGI/pcOfG15/8ZKa/MYOAa5E=,tag:uWY/eG+vW/5l382y4lN6Ow==,type:str]
     pgp:
-        - created_at: "2025-05-25T10:35:11Z"
+        - created_at: "2025-05-25T12:00:23Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMAxd/Yh1BfDklAQ/+K+G06VtrtojKTRADKvXKKF+KI2ishkmOLnQNblMhRy10
-            cJeyfXrQ6HLaqVAh+3/2IUNb85Y/udfFHH6GuCrnib4QwJU1+u/rh1h11BDTKJMO
-            y5mkGZuu1mEp30sSSbEYlk4FMoklqsA2SPIb1ofYi5M+Iz1eMWeJyUy6mMvrClYw
-            y2EQ+9+39o4sO/KTg6RI6uF/BDgL/qo9PBg4IGXS6KQYiQdzOKslxZRXdKren5ll
-            /AA0BWj4pciytuWI3Rp2dfd4Odk+hf/fnk8vyki0snDlR0GP4hKifxseoOHnHVor
-            Rxp4bb3uUwpZ0yi3yn8/IwC797ZwcefyNTDm7UACmmUvJBYEdul5YdhFXVAtENst
-            fYIGuI2Ypkky4klu1QRkrzSwqztuIZ5O5o16rn3McPycXh9ftxELnPE0rQz+4ee3
-            bcy9FK8b9fsgc3YgqqfDYuXyoyA90pDRl+x+Ejng089pA2I1yes1pT+vMaxfFpvj
-            mulzhlTdc63xNWzqQQ9Zdk7z239pgvrtVI6bQDSDlLT8qcLAhqBf6lCcAL6tqUJy
-            wpbiTA4GfB6h26vFOvvvLNhMKn7XeAZUt2PiaZR2Nxdh8slcvVbgBiMcziEugZ2G
-            Mzq0fzD1EbJsdceTx4hgVop8q40KiFZCFnx1gRrlH8sUrF92NPa14skaAtHsHozU
-            aAEJAhCW+hNEIFREgHv2QeN/lV7qhjyDiBKWUXKbzILUutR0r5hMfmHAnyen5Ck7
-            ROGVrA4EpO9SOr8CxPp0DngmdhpwoWTSE4THENNKV/ggNTzFz6mjulUcEJMcMX5q
-            M3eLeR38qWQa
-            =ajdb
+            hQIMAxd/Yh1BfDklAQ/9FFfR6OV8i8eep9/9NneTHN0FGxHBF/HWDyi2ga0wuDpu
+            ntVBpkCT2KtqbDKuNaMtUP6GIu8v8/52FEDnpSZsJrXANt4mz97eZYft7dllC+MU
+            Ge8KxO5LY4YRkboELYpMb9D4zo/tZ3o40mqeBz6dCG+4acAOcaNpF4NWuzqINm2o
+            Qp/PeY9M5JIkf+ReJM1G14EDam509EsbA/dgysbXj0FCCOjTv+1NIQ+5x1AuEeTK
+            75ra+5igSr5cQHHeHZam9JyRhjxd1zawEj6VK0bOhqjI5KBpa98RoSH36aMijdOF
+            N5E6z3TClLKuvxD66s1LX2TjYvE348+UDEbf3c5/iAZzWeKzYYBDZZrMwAoBXnK2
+            ajzLg8r5WUrXZ2A/9godsc5DtSnS8eqhSWckLQLEaePyuAhr3tczWOCEloDJ4CPm
+            PVHsAsegFYoK3iDILzl0IoYSVKfJO/440xeFn+rZD3qSSAZgeEvhYu6od85e3Cfa
+            EvSWPukaREucXxjIdwf6kSa4zfocY9Fsz4Ug4Pser7F1Fiw40FvSg47EMiwx7oxq
+            WB5XXep/IwRMfK49k23e3xFExXQei/F2va5RtZfOxuNHPa6mz1GleDzNEN8Yn3Rb
+            G1xZwUMBKGBtT68MiSmdDS/pb/NbzMeNxHRQh1mVoOFKIaVh9Bieuw0Kjd/yKqTU
+            aAEJAhB0SUSBaXCOHVO+rrHe0Fm9P3XsSc9+ZKB5EckSuIxvU4vxOlUf9qqlf6tA
+            pTSggVbG9umwTQ9yD6LRMafeuPGVK/rTc1xr+ck0qOJ+C2RQyiaiwn0P7jz25wpn
+            san0yxD+bcq5
+            =hb+B
             -----END PGP MESSAGE-----
           fp: F20CF3DE0B4ACDFCAF07A9D76399FB237185E764
     encrypted_regex: ^(data|stringData)$
diff --git a/infrastructure/cert-manager/letsencrypt-clusterissuer.yaml b/infrastructure/cert-manager/letsencrypt-clusterissuer.yaml
index 1b272eb..6f988c0 100644
--- a/infrastructure/cert-manager/letsencrypt-clusterissuer.yaml
+++ b/infrastructure/cert-manager/letsencrypt-clusterissuer.yaml
@@ -14,7 +14,7 @@ spec:
             groupName: patanix.de
             solverName: hetzner
             config:
-              secretName: hetzner-dns-api-token
+              secretName: hetzner-secret
               zoneName: patanix.de
               apiUrk: https://dns.hetzner.com/api/v1
               # apiTokenSecretRef: