diff --git a/infra/kubernetes/uptime-kuma/install.sh b/infra/kubernetes/uptime-kuma/install.sh
new file mode 100755
index 0000000..889386b
--- /dev/null
+++ b/infra/kubernetes/uptime-kuma/install.sh
@@ -0,0 +1 @@
+helm upgrade --install vac-uptime-kuma uptime-kuma/uptime-kuma --install --namespace uptime-kuma --create-namespace -f values.yaml
diff --git a/infra/kubernetes/uptime-kuma/values.yaml b/infra/kubernetes/uptime-kuma/values.yaml
new file mode 100644
index 0000000..bb3c4e6
--- /dev/null
+++ b/infra/kubernetes/uptime-kuma/values.yaml
@@ -0,0 +1,36 @@
+podEnv:
+  # a default port must be set. required by container
+  - name: "UPTIME_KUMA_PORT"
+    value: "3001"
+  - name: "NODE_OPTIONS"
+    value: "--insecure-http-parser"
+ingress:
+  enabled: true
+  className: "traefik"
+  annotations:
+    cert-manager.io/cluster-issuer: "acme-prod"   
+    nginx.ingress.kubernetes.io/proxy-read-timeout: "3600"
+    nginx.ingress.kubernetes.io/proxy-send-timeout: "3600"
+    nginx.ingress.kubernetes.io/server-snippets: |
+      location / {
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_http_version 1.1;
+        proxy_set_header X-Forwarded-Host $http_host;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header X-Forwarded-For $remote_addr;
+        proxy_set_header Host $host;
+        proxy_set_header Connection "upgrade";
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header   Upgrade $http_upgrade;
+        proxy_cache_bypass $http_upgrade;
+      }
+  hosts:
+    - host: status.vaclab.org
+      paths:
+        - path: /
+          pathType: Prefix
+  tls:
+  - secretName: vaclab-uptime-tls-secret
+    hosts:
+    - "status.vaclab.org"