diff --git a/apps/authelia/release.yaml b/apps/authelia/release.yaml
index d531d8b..ae7b4e3 100644
--- a/apps/authelia/release.yaml
+++ b/apps/authelia/release.yaml
@@ -17,7 +17,7 @@ spec:
       enabled: true
       tls:
         enabled: true
-        secret: huizinga-dev-tls
+        secret: ${domain/\./-}-tls
       traefikCRD:
         enabled: true
         entryPoints:
@@ -50,7 +50,7 @@ spec:
       session:
         cookies:
           - subdomain: login
-            domain: huizinga.dev
+            domain: ${domain}
 
       storage:
         postgres:
diff --git a/apps/traefik-dashboard/ingress.yaml b/apps/traefik-dashboard/ingress.yaml
index aab22f7..6e83d65 100644
--- a/apps/traefik-dashboard/ingress.yaml
+++ b/apps/traefik-dashboard/ingress.yaml
@@ -7,7 +7,7 @@ spec:
   entryPoints:
     - websecure
   routes:
-    - match: Host(`traefik.huizinga.dev`)
+    - match: Host(`traefik.${domain}`)
       kind: Rule
       middlewares:
         - name: traefik-dashboard-basicauth
@@ -16,4 +16,4 @@ spec:
         - name: api@internal
           kind: TraefikService
   tls:
-    secretName: huizinga-dev-tls
+    secretName: ${domain/\./-}-tls
diff --git a/apps/whoami.yaml b/apps/whoami.yaml
index abba5d9..5d4b19c 100644
--- a/apps/whoami.yaml
+++ b/apps/whoami.yaml
@@ -47,7 +47,7 @@ spec:
   entryPoints:
     - websecure
   routes:
-    - match: Host(`whoami.huizinga.dev`)
+    - match: Host(`whoami.${domain}`)
       kind: Rule
       middlewares:
         - name: default-headers
@@ -55,4 +55,4 @@ spec:
         - name: whoami
           port: 80
   tls:
-    secretName: huizinga-dev-tls
+    secretName: ${domain/\./-}-tls
diff --git a/clusters/titan.lan.huizinga.dev/apps.yaml b/clusters/titan.lan.huizinga.dev/apps.yaml
index 17b1803..494a9d2 100644
--- a/clusters/titan.lan.huizinga.dev/apps.yaml
+++ b/clusters/titan.lan.huizinga.dev/apps.yaml
@@ -15,6 +15,9 @@ spec:
   sourceRef:
     kind: GitRepository
     name: flux-system
+  postBuild:
+    substitute:
+      domain: huizinga.dev
   path: ./apps
   prune: true
   wait: true