diff --git a/external/cloudflared/Chart.yaml b/external/cloudflared/Chart.yaml
new file mode 100644
index 00000000..fa89b479
--- /dev/null
+++ b/external/cloudflared/Chart.yaml
@@ -0,0 +1,7 @@
+apiVersion: v2
+name: cloudflared
+version: 0.0.0
+dependencies:
+- name: cloudflared
+  version: 0.1.6
+  repository: file://../../../charts/charts/cloudflared
diff --git a/external/cloudflared/values.yaml b/external/cloudflared/values.yaml
new file mode 100644
index 00000000..12e9bfba
--- /dev/null
+++ b/external/cloudflared/values.yaml
@@ -0,0 +1,10 @@
+cloudflared:
+  tunnel: homelab
+  ingress:
+  # It is safe to put a wildcard here
+  # Please see https://homelab.khuedoan.com/reference/faq.html#is-it-safe-to-use-wildcard-in-cloudflare-tunnel-ingress-config
+  - hostname: "*.khuedoan.com"
+    service: https://ingress-nginx-controller.ingress-nginx
+    originRequest:
+      noTLSVerify: true
+  - service: http_status:404