diff --git a/jelly/ing.yaml b/jelly/ing.yaml
new file mode 100644
index 0000000..4670afb
--- /dev/null
+++ b/jelly/ing.yaml
@@ -0,0 +1,25 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt
+    external-dns.alpha.kubernetes.io/target: drache.martyn.berlin
+    kubernetes.io/ingress.class: nginx
+  name: jellyfin-ingress
+  namespace: jellyfin
+spec:
+  rules:
+  - host: flix.martyn.berlin
+    http:
+      paths:
+      - backend:
+          service:
+            name: jellyfin
+            port:
+              number: 8096
+        path: /
+        pathType: Prefix
+  tls:
+  - hosts:
+    - flix.martyn.berlin
+    secretName: flix-tls
diff --git a/jelly/service.yaml b/jelly/service.yaml
new file mode 100644
index 0000000..2469a83
--- /dev/null
+++ b/jelly/service.yaml
@@ -0,0 +1,7 @@
+kind: Service
+apiVersion: v1
+metadata:
+  name: jellyfin
+spec:
+  type: ExternalName
+  externalName: remote-jelly.cluster-ingress.svc.cluster.local