diff --git a/applications/kustomization.yaml b/applications/kustomization.yaml
index 4be541a..40b2c05 100644
--- a/applications/kustomization.yaml
+++ b/applications/kustomization.yaml
@@ -5,7 +5,9 @@ resources:
   # add-ons
   - add-ons/traefik.yaml
   - add-ons/cert-manager.yaml
+
   # services
   - services/app-autoregexbot.yaml
   - services/app-betterslcm.yaml
+  - services/app-jellyfin.yaml
   - services/app-scriptscribe.yaml
diff --git a/applications/services/app-jellyfin.yaml b/applications/services/app-jellyfin.yaml
new file mode 100644
index 0000000..278ef4e
--- /dev/null
+++ b/applications/services/app-jellyfin.yaml
@@ -0,0 +1,38 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: jellyfin
+  namespace: argocd
+spec:
+  project: default
+  sources:
+    - repoURL: https://jellyfin.github.io/jellyfin-helm
+      chart: jellyfin
+      targetRevision: "2.7.0"
+      helm:
+        values: |
+          service:
+            type: ClusterIP
+            port: 8096
+          ingress:
+            enabled: false
+          persistence:
+            config:
+              enabled: true
+              size: 2Gi
+            media:
+              enabled: true
+              type: hostPath
+              hostPath: /srv/media
+    - repoURL: https://gitea.whyredfire.tech/whyredfire/gitops.git
+      targetRevision: main
+      path: services/jellyfin
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: jellyfin
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true
diff --git a/services/jellyfin/httproute-local.yaml b/services/jellyfin/httproute-local.yaml
new file mode 100644
index 0000000..58e90ad
--- /dev/null
+++ b/services/jellyfin/httproute-local.yaml
@@ -0,0 +1,21 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: jellyfin-local
+  namespace: jellyfin
+spec:
+  parentRefs:
+    - name: traefik-gateway
+      namespace: traefik
+      kind: Gateway
+      sectionName: websecure-dev
+  hostnames:
+    - jellyfin-local.whyredfire.dev
+  rules:
+    - matches:
+        - path:
+            type: PathPrefix
+            value: /
+      backendRefs:
+        - name: jellyfin
+          port: 8096
diff --git a/services/jellyfin/httproute.yaml b/services/jellyfin/httproute.yaml
new file mode 100644
index 0000000..c2a99b0
--- /dev/null
+++ b/services/jellyfin/httproute.yaml
@@ -0,0 +1,21 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: jellyfin
+  namespace: jellyfin
+spec:
+  parentRefs:
+    - name: traefik-gateway
+      namespace: traefik
+      kind: Gateway
+      sectionName: websecure-dev
+  hostnames:
+    - jellyfin.whyredfire.dev
+  rules:
+    - matches:
+        - path:
+            type: PathPrefix
+            value: /
+      backendRefs:
+        - name: jellyfin
+          port: 8096