diff --git a/cluster/apps/data/kustomization.yaml b/cluster/apps/data/kustomization.yaml
index 32cc4f4a3..e318faffa 100644
--- a/cluster/apps/data/kustomization.yaml
+++ b/cluster/apps/data/kustomization.yaml
@@ -7,6 +7,7 @@ resources:
   - freshrss
   - jobs
   - joplin-server
+  - mariadb-kube
   - pgadmin
   - pgbackups
   - postgresql-kube
diff --git a/cluster/apps/data/mariadb-kube/helm-release.yaml b/cluster/apps/data/mariadb-kube/helm-release.yaml
new file mode 100644
index 000000000..42f625e0d
--- /dev/null
+++ b/cluster/apps/data/mariadb-kube/helm-release.yaml
@@ -0,0 +1,27 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: mariadb-kube
+  namespace: data
+spec:
+  interval: 5m
+  chart:
+    spec:
+      # renovate: registryUrl=https://charts.bitnami.com/bitnami/
+      chart: mariadb
+      version: 9.3.7
+      sourceRef:
+        kind: HelmRepository
+        name: bitnami-charts
+        namespace: flux-system
+      interval: 5m
+  values:
+    image:
+      registry: docker.io
+      repository: bitnami/mariadb
+    auth:
+      rootPassword: "${SECRET_MARIADB_ROOT_PASSWORD}"
+    persistence:
+      enabled: true
+      existingClaim: mariadb-kube
diff --git a/cluster/apps/data/mariadb-kube/kustomization.yaml b/cluster/apps/data/mariadb-kube/kustomization.yaml
new file mode 100644
index 000000000..21f1d9e05
--- /dev/null
+++ b/cluster/apps/data/mariadb-kube/kustomization.yaml
@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - helm-release.yaml
+  - volume.yaml
diff --git a/cluster/apps/data/mariadb-kube/volume.yaml b/cluster/apps/data/mariadb-kube/volume.yaml
new file mode 100644
index 000000000..d7fafd08a
--- /dev/null
+++ b/cluster/apps/data/mariadb-kube/volume.yaml
@@ -0,0 +1,15 @@
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: mariadb-kube
+  namespace: data
+  labels:
+    kasten-io-snapshots: "enable"
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: rook-ceph-block
+  resources:
+    requests:
+      storage: 10Gi
diff --git a/cluster/base-custom/secrets/cluster-secrets.yaml b/cluster/base-custom/secrets/cluster-secrets.yaml
index 9a71aa95f..a8fba33a4 100644
--- a/cluster/base-custom/secrets/cluster-secrets.yaml
+++ b/cluster/base-custom/secrets/cluster-secrets.yaml
@@ -50,6 +50,7 @@ stringData:
     SECRET_KUBE_PROMETHEUS_STACK_ALERTMANAGER_PUSHOVER_TOKEN: ENC[AES256_GCM,data:RQVClsRr3iGuAeIaoLSWYpMLBA1U8oM3tHB0wo5h,iv:RsQ+HHPQDWFd8SwBzW6VXp5A+k8OxwazYdJ4tUZsEjg=,tag:en6HdVagYWShz9ImeVZeyw==,type:str]
     SECRET_KUBE_PROMETHEUS_STACK_GRAFANA_ADMIN_PASSWORD: ENC[AES256_GCM,data:XtZaLE6lbRdtnXzUejo=,iv:/hJ0A0tTK+UcABTIhNuL1tlmSpu4UI5BsYvF5e36K44=,tag:bmrB2Ad9hj77BZtWfFNnUg==,type:str]
     SECRET_LYCHEE_DB_PASSWORD: ENC[AES256_GCM,data:9dzZQDqEteIb0g7fXY4=,iv:CNGH6Z1Hnik4HInuj0x9fw/tWx3osVJWlPVHbTMyrE0=,tag:xwBDUFQ0wz5TzOAQ2oyxtw==,type:str]
+    SECRET_MARIADB_ROOT_PASSWORD: ENC[AES256_GCM,data:lVP0R13c6YVZdq1C8/dGng==,iv:S8yxD+6cwV7bAmi+N7lhtEflGCsKdik7ZR4rEa49Noo=,tag:nikpNMDJwycvA+zXhk4Pdg==,type:str]
     SECRET_MINIO_ACCESS_KEY: ENC[AES256_GCM,data:pKBn7MY=,iv:je1oV2pfRPSPWMEixw66e/dAIghAVcqWDpfm6qch9Qw=,tag:vIyUYAhyul4xMmpMmI+kOg==,type:str]
     SECRET_MINIO_SECRET_KEY: ENC[AES256_GCM,data:FP3vvcD2z6u0ZHmcFFlt1SFexzY=,iv:0tvSP+f29nuMw0oYW8WOcutaOhk9iG65K8v//GQrTOw=,tag:vZdTs0ygzien7QD4CFPvwA==,type:str]
     SECRET_MINIO_ENDPOINT: ENC[AES256_GCM,data:kiSJutyP8yx73CSv/BiYMiur5Yu21Rpm,iv:ERTeM4W/SFs/ggrV90CH2iLPcMJ+72wdlNBrtd/ib00=,tag:+iK80l/4GHCCyjN50DZkKg==,type:str]
@@ -72,8 +73,8 @@ sops:
     gcp_kms: []
     azure_kv: []
     hc_vault: []
-    lastmodified: '2021-04-21T07:17:18Z'
-    mac: ENC[AES256_GCM,data:XIsxtVqEGIifUUEg4DnFl4sGcv7k/HTStjGLtypPByvWnL7wL2+wciOAp97vV6MR/6QBEl5Q36WCDl0NU/x/QZL/KQywJv1h3yrviMEgSTuJQY7dFjeUfC4zfSgWiXxqcIVlJb2bqYZ5JiE5IxfUK1AvFB7Ihc4fPhX8iXCjSiM=,iv:+Ta7b6hkHvHPTWLmMbm31sAWaoOtRMyIznuBCBI6ddQ=,tag:lrm8GhpmPmgs9MNlq90e7A==,type:str]
+    lastmodified: '2021-04-21T08:33:46Z'
+    mac: ENC[AES256_GCM,data:WWZA9FlFQ2cskxDuzz3R6ks57km08N8R1N1+vnLaE8/7eCHizQzLU+nPqJv0S6zy+JdNsofd96kylm+YsFozDEGE+75d2i/6MDMApmJjOen6A9LrJBmXgLjHGrzegqhDxVon1T1slDRVg88Y95DQhA/TMUZtpCFXFYAmRSJGvzs=,iv:oF9KoGTDjXaYeJ/OznAAlVmTd1c3ci9bvy7uJT8HiC0=,tag:fdiH3fZ245LNYP98aGfEew==,type:str]
     pgp:
     -   created_at: '2021-04-19T23:03:06Z'
         enc: |