diff --git a/main.tf b/main.tf
index 93c9328..3b9a231 100644
--- a/main.tf
+++ b/main.tf
@@ -397,6 +397,38 @@ EOT
   ]
 }
 
+resource "helm_release" "container-registry" {
+  name = "container-registry"
+  namespace = "zot"
+  repository = "https://zotregistry.io/helm-charts/"
+  chart = "zot"
+  create_namespace = true
+  values = [
+<<EOT
+ingress:
+  enabled: true
+  annotations:
+    traefik.ingress.kubernetes.io/router.middlewares: default-redirect-https@kubernetescrd
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+  hosts:
+  - host: registry.${var.domain_suffix}
+    paths:
+  - path: /
+    pathType: Prefix
+  tls:
+  - hosts:
+    - registry.${var.domain_suffix}
+      secretName: tls-gitea
+  className: "traefik"
+httpGet:
+  scheme: HTTP
+persistence: true
+pvc:
+  storageClassName: ${var.storageclass}
+EOT
+  ]
+}
+
 resource "random_integer" "proxmox_node" {
   min=1
   max=2