diff --git a/cluster/apps/data/kustomization.yaml b/cluster/apps/data/kustomization.yaml
index 32cc4f4a3..6c1ca8ff0 100644
--- a/cluster/apps/data/kustomization.yaml
+++ b/cluster/apps/data/kustomization.yaml
@@ -16,3 +16,4 @@ resources:
   - sharry
   - vikunja
   - volumes
+  - wallabag
diff --git a/cluster/apps/data/pgbackups/deployment.yaml b/cluster/apps/data/pgbackups/deployment.yaml
index 1011ec7ba..0c36449fe 100644
--- a/cluster/apps/data/pgbackups/deployment.yaml
+++ b/cluster/apps/data/pgbackups/deployment.yaml
@@ -29,7 +29,7 @@ spec:
             - name: POSTGRES_HOST
               value: postgresql-kube.data.svc.cluster.local.
             - name: POSTGRES_DB
-              value: authelia,bitwarden,drone,freshrss,gitea,hass,healthchecks,joplin,lychee,postgres,recipes,sharry,vikunja
+              value: authelia,bitwarden,drone,freshrss,gitea,hass,healthchecks,joplin,lychee,postgres,recipes,sharry,vikunja,wallabag
             - name: POSTGRES_USER
               value: postgres
             - name: POSTGRES_PASSWORD
diff --git a/cluster/apps/data/wallabag/helm-release.yaml b/cluster/apps/data/wallabag/helm-release.yaml
new file mode 100644
index 000000000..8a4691a44
--- /dev/null
+++ b/cluster/apps/data/wallabag/helm-release.yaml
@@ -0,0 +1,64 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: wallabag
+  namespace: data
+spec:
+  interval: 5m
+  chart:
+    spec:
+      # renovate: registryUrl=https://k8s-at-home.com/charts/
+      chart: wallabag
+      version: 2.4.0
+      sourceRef:
+        kind: HelmRepository
+        name: k8s-at-home-charts
+        namespace: flux-system
+  values:
+    image:
+      repository: wallabag/wallabag
+      # Upgrading the wallabag version generally requires a migration.
+      # see https://doc.wallabag.org/en/admin/upgrade.html
+      tag: 2.4.2
+    env:
+      SYMFONY__ENV__DATABASE_DRIVER: pdo_pgsql
+      SYMFONY__ENV__DATABASE_HOST: postgresql-kube.data.svc.cluster.local.
+      SYMFONY__ENV__DATABASE_PORT: 5432
+      SYMFONY__ENV__DATABASE_NAME: wallabag
+      SYMFONY__ENV__DATABASE_USER: wallabag
+      SYMFONY__ENV__DATABASE_PASSWORD: ${SECRET_WALLABAG_DB_PASSWORD}
+      SYMFONY__ENV__REDIS_HOST: wallabag-redis-master
+      SYMFONY__ENV__DOMAIN_NAME: https://wallabag.${SECRET_CLUSTER_DOMAIN}
+      SYMFONY__ENV__SERVER_NAME: Wallabag
+      SYMFONY__ENV__FOSUSER_REGISTRATION: "false"
+      SYMFONY__ENV__FOSUSER_CONFIRMATION: "false"
+    service:
+      port:
+        annotations:
+          prometheus.io/probe: "true"
+          prometheus.io/protocol: http
+    ingress:
+      enabled: true
+      annotations:
+        kubernetes.io/ingress.class: "nginx"
+      hosts:
+        - host: wallabag.${SECRET_CLUSTER_DOMAIN}
+          paths:
+            - path: /
+              pathType: Prefix
+      tls:
+        - hosts:
+            - wallabag.${SECRET_CLUSTER_DOMAIN}
+    persistence:
+      images:
+        enabled: true
+        existingClaim: wallabag-images
+    redis:
+      enabled: true
+      clusterDomain: ${CLUSTER_DOMAIN}
+      architecture: standalone
+      replica:
+        replicaCount: 0
+      persistence:
+        enabled: false
diff --git a/cluster/apps/data/wallabag/kustomization.yaml b/cluster/apps/data/wallabag/kustomization.yaml
new file mode 100644
index 000000000..21f1d9e05
--- /dev/null
+++ b/cluster/apps/data/wallabag/kustomization.yaml
@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - helm-release.yaml
+  - volume.yaml
diff --git a/cluster/apps/data/wallabag/volume.yaml b/cluster/apps/data/wallabag/volume.yaml
new file mode 100644
index 000000000..1c8125c41
--- /dev/null
+++ b/cluster/apps/data/wallabag/volume.yaml
@@ -0,0 +1,15 @@
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: wallabag-images
+  namespace: data
+  labels:
+    kasten-io-snapshots: "enable"
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: rook-ceph-block
+  resources:
+    requests:
+      storage: 2Gi
diff --git a/cluster/base-custom/secrets/cluster-secrets.yaml b/cluster/base-custom/secrets/cluster-secrets.yaml
index 008ffe975..0d2b63698 100644
--- a/cluster/base-custom/secrets/cluster-secrets.yaml
+++ b/cluster/base-custom/secrets/cluster-secrets.yaml
@@ -68,14 +68,15 @@ stringData:
     SECRET_QBITTORRENT_PASSWORD: ENC[AES256_GCM,data:5uMYdy9Ag+xdfb3jspuqoHDysGs=,iv:S9AQda1Hh6iSTMVe5yGgZk45ojco4G9tOOmPKruJMjY=,tag:H6PYjAi0/xKvsiGsn4+jeg==,type:str]
     SECRET_VIKUNJA_JWT_SECRET: ENC[AES256_GCM,data:YmiqNSfdiKmyaptMp6wJSeMT/sVcN1hXlo6x2Aoave8=,iv:NDMumWI9Q274tZoYjGDbseuzoxtOSeFnAZv4RhOAL+s=,tag:6DTbimVgeWCDFAVY0ymv0g==,type:str]
     SECRET_VIKUNJA_PASSWORD: ENC[AES256_GCM,data:1Kd7hdWtVaZ1YfZ4ZgzfLA==,iv:/IxS+m8cphL2cnlM4vvqQ2fiFaVwVYyT1BRoQrwvku8=,tag:0fHVyPEdqLyn8LHz30nWeA==,type:str]
+    SECRET_WALLABAG_DB_PASSWORD: ENC[AES256_GCM,data:pHc78D2QMNghL6aUPqA=,iv:UP4vt4uhUHndBu2OD5VBwUH05DtKQwetDSep4tb7Lp8=,tag:xIMQ+8v5IlIUDqUUwzt5Dg==,type:str]
 sops:
     kms: []
     gcp_kms: []
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2021-05-01T22:19:12Z"
-    mac: ENC[AES256_GCM,data:Z+iXsFFl7JK3uBSTxxsjdxw4tYW0D/BK1DDMT65+pL2FywvmNcAYkEoZs2UxjdEyo9uNFn/4ihkS/0zZlT5Q5Zmk/nHT7G8cFvPaPjmqmagbnWT6IX9593nI4JGFASasRdn41gSCuGS3+bKpl3oADgIAt+uVr4bb4fk3iEqbYgE=,iv:p4Gm3v9VFBa43Wbm1TXzVvad+2OMTLw3g8JGjioQjlA=,tag:brSZcVo3o7vgiGOS6ASnVg==,type:str]
+    lastmodified: "2021-05-01T22:33:06Z"
+    mac: ENC[AES256_GCM,data:iNmc3jhLZsWA1hcu/OepCIRVMHDI7Vh2QZSxsrVcQ+XkVHxXdZjebmDxcQaDBDYFis0jaT7s/ISgc/7Z1qJ3/KoV1TX1LxNt4X9/BYX7GnS0Zd95d1FVqACj0bogLq/rwj2gwqdM17LvCRW5eANaBz+mQuuH1NqCWKW9Eq9d70g=,iv:4xEbNHrnjN5ytZgJ37buNVTUciJReFzM0uYP0OlBev8=,tag:d2zxqqBLIIa6xtWB5/69pw==,type:str]
     pgp:
         - created_at: "2021-04-19T23:03:06Z"
           enc: |