diff --git a/gitea/values.yaml b/gitea/values.yaml
new file mode 100644
index 0000000..68741b9
--- /dev/null
+++ b/gitea/values.yaml
@@ -0,0 +1,92 @@
+gitea:
+  admin:
+    username: ryan
+    email: ryan@lunarfront.tech
+    existingSecret: gitea-admin-secret
+
+  config:
+    server:
+      DOMAIN: git2.lunarfront.tech
+      ROOT_URL: https://git2.lunarfront.tech
+      SSH_DOMAIN: git2-ssh.lunarfront.tech
+      SSH_PORT: 22
+      START_SSH_SERVER: true
+    database:
+      DB_TYPE: postgres
+      SSL_MODE: require
+    session:
+      PROVIDER: db
+    cache:
+      ADAPTER: memory
+    queue:
+      TYPE: level
+
+  additionalConfigFromEnvs:
+    - name: GITEA__database__HOST
+      valueFrom:
+        secretKeyRef:
+          name: gitea-db
+          key: host
+    - name: GITEA__database__NAME
+      valueFrom:
+        secretKeyRef:
+          name: gitea-db
+          key: database
+    - name: GITEA__database__USER
+      valueFrom:
+        secretKeyRef:
+          name: gitea-db
+          key: user
+    - name: GITEA__database__PASSWD
+      valueFrom:
+        secretKeyRef:
+          name: gitea-db
+          key: password
+
+# Disable built-in Postgres and Valkey
+postgresql-ha:
+  enabled: false
+
+postgresql:
+  enabled: false
+
+valkey-cluster:
+  enabled: false
+
+valkey:
+  enabled: false
+
+persistence:
+  enabled: true
+  size: 20Gi
+  storageClass: do-block-storage
+
+service:
+  ssh:
+    type: LoadBalancer
+    port: 22
+    annotations:
+      service.beta.kubernetes.io/do-loadbalancer-name: "gitea-ssh"
+
+ingress:
+  enabled: true
+  className: nginx
+  annotations:
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+  hosts:
+    - host: git2.lunarfront.tech
+      paths:
+        - path: /
+          pathType: Prefix
+  tls:
+    - secretName: cloudflare-origin-cert
+      hosts:
+        - git2.lunarfront.tech
+
+resources:
+  requests:
+    cpu: 200m
+    memory: 256Mi
+  limits:
+    cpu: 1000m
+    memory: 512Mi