diff --git a/apps/vaultwarden/kustomization.yaml b/apps/vaultwarden/kustomization.yaml
new file mode 100644
index 0000000..cf8fb87
--- /dev/null
+++ b/apps/vaultwarden/kustomization.yaml
@@ -0,0 +1,32 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+helmGlobals:
+  chartHome: ../../charts
+
+resources:
+  - manifests/ingress.yaml
+
+helmCharts:
+  - name: vaultwarden
+    repo: https://guerzon.github.io/vaultwarden
+    namespace: vaultwarden
+    releaseName: vaultwarden
+    version: 0.23.1
+    valuesFile: values.yaml
+
+replacements:
+  - source:
+      kind: Ingress
+      name: vaultwarden
+      fieldPath: metadata.annotations.dns
+    targets:
+      - select:
+          kind: Ingress
+          name: vaultwarden
+        fieldPaths:
+          - spec.rules.0.host
+        options:
+          # This keeps the "vault." prefix
+          delimiter: "."
+          index: 1
diff --git a/apps/vaultwarden/manifests/ingress.yaml b/apps/vaultwarden/manifests/ingress.yaml
new file mode 100644
index 0000000..f4f4f10
--- /dev/null
+++ b/apps/vaultwarden/manifests/ingress.yaml
@@ -0,0 +1,23 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: vaultwarden
+  annotations:
+    gethomepage.dev/enabled: "true"
+    gethomepage.dev/description: Password manager
+    gethomepage.dev/group: Security
+    gethomepage.dev/icon: bitwarden
+    gethomepage.dev/name: Vaultwarden
+spec:
+  rules:
+    # DNS will be replace by kustomize
+    - host: vault.$(DNS)
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: vaultwarden
+                port:
+                  name: http
\ No newline at end of file
diff --git a/apps/vaultwarden/values.yaml b/apps/vaultwarden/values.yaml
new file mode 100644
index 0000000..d64614f
--- /dev/null
+++ b/apps/vaultwarden/values.yaml
@@ -0,0 +1,5 @@
+# Default values: https://github.com/guerzon/vaultwarden/blob/v0.23.1/charts/vaultwarden/values.yaml
+
+domain: http://vault.lab.local:844
+# Number of days to retain events stored in the database.
+eventsDayRetain: 30
\ No newline at end of file