diff --git a/cluster/data/bitwardenrs.yaml b/cluster/data/bitwardenrs.yaml
new file mode 100644
index 000000000..96a5b1682
--- /dev/null
+++ b/cluster/data/bitwardenrs.yaml
@@ -0,0 +1,65 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: bitwardenrs
+  namespace: data
+spec:
+  interval: 5m
+  chart:
+    spec:
+      # renovate: registryUrl=https://k8s-at-home.com/charts/
+      chart: bitwardenrs
+      version: 1.0.1
+      sourceRef:
+        kind: HelmRepository
+        name: k8s-at-home-charts
+        namespace: flux-system
+      interval: 5m
+  values:
+    image:
+      repository: bitwardenrs/server
+      tag: 1.17.0
+      pullPolicy: IfNotPresent
+    env:
+      SIGNUPS_ALLOWED: "false"
+    bitwardenrs:
+      domain: ""
+      signupsAllowed: false
+      websockets:
+        enabled: false
+      admin:
+        enabled: true
+        disableAdminToken: false
+        existingSecret:
+          enabled: false
+          name: ""
+          tokenKey: ""
+    service:
+      port: 80
+      annotations:
+        prometheus.io/probe: "true"
+        prometheus.io/protocol: http
+    ingress:
+      enabled: true
+      annotations:
+        kubernetes.io/ingress.class: "nginx"
+    persistence:
+      enabled: true
+      existingClaim: bitwarden-config
+  valuesFrom:
+  - kind: ConfigMap
+    name: helmrelease-data-bitwardenrs
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: bitwarden-config
+  namespace: data
+spec:
+  accessModes:
+  - ReadWriteOnce
+  storageClassName: longhorn-backups
+  resources:
+    requests:
+      storage: 1Gi
diff --git a/secrets/helmrelease-data-bitwardenrs.yaml b/secrets/helmrelease-data-bitwardenrs.yaml
new file mode 100644
index 000000000..5198a9293
--- /dev/null
+++ b/secrets/helmrelease-data-bitwardenrs.yaml
@@ -0,0 +1,36 @@
+apiVersion: v1
+data:
+    values.yaml: ENC[AES256_GCM,data:BjlqSydFIFRQsWnuFfHDLYuS16O5N119A93YCH25WL5vT99jpqnt3grQ6zXBfcHSGNXmJ3Q5n5QBIM6N3va9AsQvJhqjLDk5XPFKGNy1mq0W75ywkkwis00Vx224NjAAEjOvdJ7vUC8Z3yM+PGv5McFnIZ1wyR6l/2wFkRF8fffOTjS1DLv63nDTFUy+his6368eDlE2WFxJV6gsWN5KoBH5HdmZKh6YzYplFtygUfQc7kpJWZFK0ojWaD5nWn/CiepWdZlrCk/9n+4kywxUkAIGZADMk2ZPBsAaiGSPy7bwv4ZgPsG0O3DzdGXyh99QfqTjzUxflygv5GRXQYimcM4yF1emIDprDs08E00lWSZ4JTQXKU+G46A=,iv:+XkcJV7NHKPhRjUStaWpzhauHQFzoJthi6LJGH1C+E0=,tag:N3xxcZ+MtoRGElduYP63fw==,type:str]
+kind: ConfigMap
+metadata:
+    creationTimestamp: null
+    name: helmrelease-data-bitwardenrs
+    namespace: data
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    lastmodified: '2020-12-12T02:12:00Z'
+    mac: ENC[AES256_GCM,data:eLeDZCMj1LJbpIIQG0CknDELoTBFpEyubj9KmfyFL8nxbyOhbBwm41XAb96eyG+4FahOt1WFSVWdve4emoyXdV3hsXwtadkbfqLcpc0fsNO2VBWJXAd+sfttdC+drg00zK1kEjWXl+/3+Hp72CBZs4NK4tU6Rggy80ppUMW499A=,iv:CFbn6Txum5nVdQtAeOrICm5W3t0Iuf9SP5CQrwH8X48=,tag:oCOTekxmYDYBSCoo+rcgoQ==,type:str]
+    pgp:
+    -   created_at: '2020-12-12T02:12:00Z'
+        enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQGMA/JorPHm1g9XAQwAoIrKFERFx3klVdaZBAxsqKoBIUZq98Qtsdp5b9FwCCMi
+            NXaILCGla+3FD0TQGUw+yhv6+n+GONJjFZyYiQj+N0m+00h/2xW/4KQ7FqdQ+RAp
+            W6v2NAvCkHoFAzqMseQxn/RcJ4PsbL0A3zEnRuDBVDuj29Nmc/QFYksL9Jx9jy70
+            blvYztc91+RyO2vrTMaVq0RignrB0Czy9c9twBL49bvqRi8xldJjkypHxZgMZPU+
+            FtTZp4Wgj1x4LgDjg0sWd+XcOFQmJnoY0R8V/WRSvw752479Q0T72aAB7iFiccUP
+            ArgcHnp1E4OLx2deZQ8k7yLKy3qoQa33/sXQQ62Y37ErVYwrZAIteFCh06srMV6Q
+            gbaZRZcMpXlgZD1X8WnR86z8WCHM7zP2o9Umwf9ES/U6s9M3RJm8n5smAUh9HbPA
+            Yif6QkxWaPNljpirLlx40kZIY1SepwrwTZiPQmvQ2uBgfrs893PUqmKS6g/K/mCZ
+            vocBtYmd2ImXU0uKfcmx0l4BEOZeI0ZSSHM8IWRg+xT+zG3RbGLfDNUaS0iJae5z
+            kkxIMcQ/3INYwTSdYGrdUlQ5IKxQbl11D4KC2eWzyjl/mFVIQjQ3BQn0u9JLQfBt
+            IRQAM/0fZxDsoPGGeFYo
+            =Z9Vq
+            -----END PGP MESSAGE-----
+        fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
+    encrypted_regex: ^(data|stringData)$
+    version: 3.6.1