diff --git a/app/Models/SslCertificate.php b/app/Models/SslCertificate.php
new file mode 100644
index 000000000..5a1767ab5
--- /dev/null
+++ b/app/Models/SslCertificate.php
@@ -0,0 +1,32 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Model;
+
+class SslCertificate extends Model
+{
+    protected $fillable = [
+        'ssl_certificate',
+        'ssl_private_key',
+        'cert_file_path',
+        'key_file_path',
+        'resource_type',
+        'resource_id',
+        'mount_path',
+        'host_path',
+        'certificate_type',
+        'valid_until',
+    ];
+
+    protected $casts = [
+        'ssl_certificate' => 'encrypted',
+        'ssl_private_key' => 'encrypted',
+        'valid_until' => 'datetime',
+    ];
+
+    public function resource()
+    {
+        return $this->morphTo();
+    }
+}
diff --git a/database/migrations/2025_01_27_153741_create_ssl_certificates_table.php b/database/migrations/2025_01_27_153741_create_ssl_certificates_table.php
new file mode 100644
index 000000000..f10306ed7
--- /dev/null
+++ b/database/migrations/2025_01_27_153741_create_ssl_certificates_table.php
@@ -0,0 +1,29 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up()
+    {
+        Schema::create('ssl_certificates', function (Blueprint $table) {
+            $table->id();
+            $table->text('ssl_certificate')->nullable();
+            $table->text('ssl_private_key')->nullable();
+            $table->string('resource_type')->nullable();
+            $table->unsignedBigInteger('resource_id')->nullable();
+            $table->enum('certificate_type', ['internal', 'external'])->default('internal');
+            $table->timestamp('valid_until')->nullable();
+            $table->timestamps();
+
+            $table->index(['resource_type', 'resource_id']);
+        });
+    }
+
+    public function down()
+    {
+        Schema::dropIfExists('ssl_certificates');
+    }
+};