diff --git a/k8s/xiongxiao.me/apps/waline/app.yaml b/k8s/xiongxiao.me/apps/waline/app.yaml
new file mode 100644
index 0000000..c5b3268
--- /dev/null
+++ b/k8s/xiongxiao.me/apps/waline/app.yaml
@@ -0,0 +1,45 @@
+---
+# Waline - waline.xiongxiao.me
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: waline-https
+  namespace: default
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`waline.xiongxiao.me`)
+      kind: Rule
+      services:
+        - name: waline-external
+          port: 8360
+  tls:
+    certResolver: letsencrypt
+
+---
+# Waline 服务 (端口 8360, 本地)
+apiVersion: v1
+kind: Service
+metadata:
+  name: waline-external
+  namespace: default
+spec:
+  type: ClusterIP
+  ports:
+  - port: 8360
+    targetPort: 8360
+    protocol: TCP
+    name: http
+---
+apiVersion: v1
+kind: Endpoints
+metadata:
+  name: waline-external
+  namespace: default
+subsets:
+- addresses:
+  - ip: 121.4.112.18
+  ports:
+  - port: 8360
+    name: http