diff --git a/internalproxy/templates/heimdall.yaml b/internalproxy/templates/heimdall.yaml
new file mode 100644
index 0000000..3ca9f1f
--- /dev/null
+++ b/internalproxy/templates/heimdall.yaml
@@ -0,0 +1,53 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: heimdall
+spec:
+  ports:
+  - name: app
+    port: 8443
+    protocol: TCP
+    targetPort: 8443
+  clusterIP: None
+  type: ClusterIP
+
+---
+
+apiVersion: v1
+kind: Endpoints
+metadata:
+  name: heimdall
+subsets:
+- addresses:
+  - ip: 192.168.20.253
+  ports:
+  - name: app
+    port: 8443
+    protocol: TCP
+
+---    
+
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: heimdall-ingress
+  annotations:
+    kubernetes.io/ingress.class: nginx
+    cert-manager.io/cluster-issuer: letsencrypt-production 
+    nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
+spec:
+  rules:
+  - host: heimdall.durp.info
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: heimdall
+            port: 
+              number: 8443         
+  tls:
+    - hosts: 
+      - heimdall.durp.info
+      secretName: heimdall-tls