diff --git a/postgres/config/clusters/main.yaml b/postgres/config/clusters/main.yaml
index a1757bf..d2f9c43 100644
--- a/postgres/config/clusters/main.yaml
+++ b/postgres/config/clusters/main.yaml
@@ -32,12 +32,21 @@ spec:
         host: 10.105.6.198
         user: streaming_replica
         dbname: postgres
-        sslmode: allow
+        sslmode: verify-full
       plugin:
         name: barman-cloud.cloudnative-pg.io
         parameters:
           barmanObjectName: truenas-s3
           serverName: weyma-bs-pgsql
+      sslKey:
+        name: weyma-pgsql-replication
+        key: tls.key
+      sslCert:
+        name: weyma-pgsql-replication
+        key: tls.crt
+      sslRootCert:
+        name: weyma-pgsql-ca
+        key: ca.crt
 
   replica:
     primary: weyma-pgsql