diff --git a/jellyfin/jellyingress.yml b/jellyfin/jellyingress.yml
new file mode 100644
index 0000000..92f68ba
--- /dev/null
+++ b/jellyfin/jellyingress.yml
@@ -0,0 +1,25 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: jellyfin
+  annotations: 
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+    haproxy.org/whitelist: "192.168.86.0/24,10.233.71.0/24"
+spec:
+  ingressClassName: haproxy
+  rules:
+  - host: "jellyfin.geesink.org"
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: jellyfin
+            port:
+              number: 8096
+  tls:
+  - hosts:
+    - home.geesink.org
+    secretName: jelly-cert-prod
+
diff --git a/jellyfin/pvc.yaml b/jellyfin/pvc.yaml
new file mode 100644
index 0000000..888e73f
--- /dev/null
+++ b/jellyfin/pvc.yaml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: jellyfin-config
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: longhorn
+  resources:
+    requests:
+      storage: 1Gi