diff --git a/README.rst b/README.rst
index 413f344..de4e519 100644
--- a/README.rst
+++ b/README.rst
@@ -204,6 +204,12 @@ ArgoCD bootstrap
       argocd app set argocd/grafana --parameter githubClientSecret=REPLACE
       argocd app set argocd/grafana --parameter adminPassword=`pwgen -1 12`
 
+* Reset forgejo password
+
+  .. code-block:: bash
+    argocd app set argocd/forgejo --parameter adminPassword=`pwgen -1 12`
+
+
 * Remove secret ``kubectl --context gullfaxi -n argocd delete secret argocd-initial-admin-secret``.
 
 Passing Sensitive Parameters in ArgoCD apps
diff --git a/state/gullfaxi/apps/forgejo/application.yaml b/state/gullfaxi/apps/forgejo/application.yaml
new file mode 100644
index 0000000..be29829
--- /dev/null
+++ b/state/gullfaxi/apps/forgejo/application.yaml
@@ -0,0 +1,69 @@
+---
+# have to add repo because oci:// prefix is not supported in repoURL
+# https://github.com/argoproj/argo-cd/issues/10823
+apiVersion: v1
+kind: Secret
+type: Opaque
+metadata:
+  name: forgejo-oci-repo
+  labels:
+    argocd.argoproj.io/secret-type: repository
+stringData:
+  name: bitnami
+  type: helm
+  enableOci: "true"
+  url: codeberg.org/forgejo-contrib
+---
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: forgejo
+spec:
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: forgejo
+  project: apps
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true
+  sources:
+    - repoURL: codeberg.org/forgejo-contrib
+      chart: forgejo
+      targetRevision: 0.12.1
+      helm:
+        valuesObject:
+          memcached:
+            enabled: false
+          postgresql:
+            enabled: false
+          test:
+            enabled: false
+          ingress:
+            enabled: true
+            className: nginx
+            annotations:
+              kubernetes.io/tls-acme: "true"
+            hosts:
+              - host: git.ioot.xyz
+                paths:
+                  - path: /
+                    pathType: Prefix
+            tls:
+              - secretName: forgejo-tls
+                hosts:
+                  - git.ioot.xyz
+          gitea:
+            admin:
+              username: admin
+              password: reset_in_argocd
+              email: "a@ioot.xyz"
+            metrics:
+              enabled: true
+              serviceMonitor:
+                enabled: true
+    - repoURL: git@github.com:amkartashov/gf-k8s.git
+      targetRevision: main
+      path: state/gullfaxi/apps/forgejo/manifests
diff --git a/state/gullfaxi/apps/forgejo/manifests/postgresql.yaml b/state/gullfaxi/apps/forgejo/manifests/postgresql.yaml
new file mode 100644
index 0000000..4ab4b13
--- /dev/null
+++ b/state/gullfaxi/apps/forgejo/manifests/postgresql.yaml
@@ -0,0 +1,10 @@
+# Example of PostgreSQL cluster
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: postgresql
+spec:
+  instances: 1
+  primaryUpdateStrategy: unsupervised
+  storage:
+    size: 10Gi