diff --git a/app-of-apps/headscale.yaml b/app-of-apps/headscale.yaml
new file mode 100644
index 0000000..51c23ab
--- /dev/null
+++ b/app-of-apps/headscale.yaml
@@ -0,0 +1,30 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: headscale
+  namespace: argocd
+spec:
+  destination:
+    namespace: headscale
+    server: https://kubernetes.default.svc
+  project: infra
+  source:
+    chart: headscale
+    repoURL: oci://codeberg.org/wrenix/helm-charts/headscale
+    targetRevision: 1.0.15
+    helm:
+      parameters:
+        - name: certmanager.dnsNames[0]
+          value: headscale.martyn.berlin
+        - name: certmanager.enabled
+          value: 'true'
+        - name: certmanager.issuerRef.name
+          value: 'letsencrypt'
+        - name: headscale.config.dns.base_domain
+          value: 'martyn.berlin'
+        - name: ingress.enabled
+          value: 'true'
+        - name: ingress.className
+          value: nginx
+        - name: ingress.hosts[0].host
+          value: headscale.martyn.berlin
diff --git a/app-of-apps/project-infra.yaml b/app-of-apps/project-infra.yaml
index 4f7d7f2..350e194 100644
--- a/app-of-apps/project-infra.yaml
+++ b/app-of-apps/project-infra.yaml
@@ -43,3 +43,4 @@ spec:
     - https://charts.pascaliske.dev
     - https://codecentric.github.io/helm-charts
     - https://charts.fossorial.io
+    - oci://codeberg.org/wrenix/helm-charts/headscale