diff --git a/Makefile b/Makefile
index ac5a968..0886608 100644
--- a/Makefile
+++ b/Makefile
@@ -1,6 +1,6 @@
 # ── Node IPs (3-CP HA topology) ───────────────────────────────────────────────
 CP1_IP  := 192.168.1.166  # talos-cp-1
-CP2_IP  := 192.168.1.213  # talos-cp-2 (storage: 3 disks)
+CP2_IP  := 192.168.1.214  # talos-cp-2 (storage: 3 disks)
 CP3_IP  := 192.168.1.162  # talos-cp-3
 CP_VIP  := 192.168.1.166  # controlplane VIP (currently .166)
 
@@ -28,7 +28,7 @@ W_CONFIG = cluster-config/worker-$(N).yaml
 # ── Help ──────────────────────────────────────────────────────────────────────
 .PHONY: help
 help:
-	@echo "Homelab cluster (3-CP HA: .166/.213/.163) — available targets"
+	@echo "Homelab cluster (3-CP HA: .166/.214/.162) — available targets"
 	@echo ""
 	@echo "  Status & Services"
 	@echo "    nodes             kubectl get nodes"
diff --git a/terraform/templates/worker.tftpl b/terraform/templates/worker.tftpl
index fce498b..dddbfc6 100644
--- a/terraform/templates/worker.tftpl
+++ b/terraform/templates/worker.tftpl
@@ -85,6 +85,8 @@ cluster:
       name: none
   token: ${bootstrap_token}
   secretboxEncryptionSecret: ${secretbox_encryption_secret}
+  ca:
+    crt: ${kubernetes_ca_crt}
   discovery:
     enabled: true
     registries: