diff --git a/manifests/apply.sh b/manifests/apply.sh
index 3cd6c81..f2e835b 100755
--- a/manifests/apply.sh
+++ b/manifests/apply.sh
@@ -6,7 +6,6 @@ SCRIPT_DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" &> /dev/null && pwd )"
 # Change to the script directory
 cd "$SCRIPT_DIR"
 
-kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.18.2/cert-manager.yaml
 kubectl apply -f helm/flux.yaml
 sleep 5
 kubectl apply -f helm/kyverno.yaml
diff --git a/modules/nixos/kubernetes.nix b/modules/nixos/kubernetes.nix
index 79ce4f2..303626c 100644
--- a/modules/nixos/kubernetes.nix
+++ b/modules/nixos/kubernetes.nix
@@ -6,6 +6,9 @@
 }:
 let
   cfg = config.greg.kubernetes;
+  cert-manager = pkgs.fetchurl {
+    url = "https://github.com/cert-manager/cert-manager/releases/download/v1.18.2/cert-manager.yaml";
+  };
 in
 {
   options.greg = {
@@ -82,6 +85,7 @@ in
           "--tls-san ${config.networking.hostName}.shire-zebra.ts.net"
         ];
         manifests = {
+          cert-manager.source = cert-manager;
           node-annotations.content = ../../manifests/nodes.yaml;
         };
         role = if cfg.agentOnly then "agent" else "server";