diff --git a/README.md b/README.md
index 6dc11f2..c61ddc7 100644
--- a/README.md
+++ b/README.md
@@ -8,6 +8,7 @@
 | [Apps](https://argocd.ioot.xyz/applications/argocd/apps) | Main app of apps |![status](https://argocd.ioot.xyz/api/badge?name=apps&revision=true)|
 | [ArgoCD](https://argocd.ioot.xyz/applications/argocd/argocd) | |![status](https://argocd.ioot.xyz/api/badge?name=argocd&revision=true)|
 | [Cilium](https://argocd.ioot.xyz/applications/argocd/cilium) | |![status](https://argocd.ioot.xyz/api/badge?name=cilium&revision=true)|
+| [Nginx Ingress Controller](https://argocd.ioot.xyz/applications/argocd/ingress-nginx) | |![status](https://argocd.ioot.xyz/api/badge?name=ingress-nginx&revision=true)|
 | [Cert Manager](https://argocd.ioot.xyz/applications/argocd/cert-manager) | |![status](https://argocd.ioot.xyz/api/badge?name=cert-manager&revision=true)|
 
 ## Cluster initialization
diff --git a/state/gullfaxi/system/ingress-nginx/application.yaml b/state/gullfaxi/system/ingress-nginx/application.yaml
new file mode 100644
index 0000000..7b73cd3
--- /dev/null
+++ b/state/gullfaxi/system/ingress-nginx/application.yaml
@@ -0,0 +1,40 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: ingress-nginx
+spec:
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: ingress-nginx
+  project: system
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true
+  source:
+    repoURL: https://kubernetes.github.io/ingress-nginx
+    chart: ingress-nginx
+    targetRevision: 4.7.1
+    helm:
+      values: |
+        # https://github.com/kubernetes/ingress-nginx/blob/main/charts/ingress-nginx/values.yaml
+        ingress-nginx:
+          controller:
+            metrics:
+              enabled: true
+              service:
+                omitClusterIP: true
+            service:
+              # preserve source IPs
+              externalTrafficPolicy: Local
+              omitClusterIP: true
+              type: NodePort
+              nodePorts:
+                # port forwarding on router
+                http: 30080
+                https: 30443
+          defaultBackend:
+            service:
+              omitClusterIP: true