diff --git a/ente-photos/ente-web-deployment.yaml b/ente-photos/ente-web-deployment.yaml
new file mode 100644
index 0000000..56b1111
--- /dev/null
+++ b/ente-photos/ente-web-deployment.yaml
@@ -0,0 +1,20 @@
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+  name: ente-web
+  labels:
+    app: ente-web
+# docker run -d --restart=always -p 3001:3001 -v uptime-kuma:/app/data --name uptime-kuma louislam/uptime-kuma:1
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: ente-web
+  template:
+    metadata:
+      labels:
+        app: ente-web
+    spec:
+      containers:
+        - name: ente-web
+          image: hebury/ente-web:latest
\ No newline at end of file
diff --git a/ente-photos/ente-web-ingress.yaml b/ente-photos/ente-web-ingress.yaml
new file mode 100644
index 0000000..c20649d
--- /dev/null
+++ b/ente-photos/ente-web-ingress.yaml
@@ -0,0 +1,33 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: ente-web-ingress
+  annotations:
+    # nginx.ingress.kubernetes.io/rewrite-target: /
+    cert-manager.io/cluster-issuer: prod-cluster-issuer
+    nginx.ingress.kubernetes.io/ssl-passthrough: "true"
+    # If you encounter a redirect loop or are getting a 307 response code
+    # then you need to force the nginx ingress to connect to the backend using HTTPS.
+    #
+    nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
+  namespace: ente-photos
+spec:
+  ingressClassName: nginx
+  rules:
+  - host: ente.hensen.io
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: ente-service
+            port: 
+              name: "https"
+            
+  # TLS configuration for HTTPS
+  tls:
+    # TLS secretName used on ClusterIssuer
+    - secretName:  letsencrypt-prod2
+      hosts:
+        - ente.hensen.io
\ No newline at end of file
diff --git a/ente-photos/ente-web-service.yaml b/ente-photos/ente-web-service.yaml
new file mode 100644
index 0000000..dee1e92
--- /dev/null
+++ b/ente-photos/ente-web-service.yaml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: ente-web-service
+spec:
+  ports:
+    - name: https
+      port: 443
+      targetPort: 3000
+  selector:
+    app: ente-web
\ No newline at end of file