diff --git a/apps/jitsi/.helmignore b/apps/jitsi/.helmignore
new file mode 100644
index 0000000..8ecf230
--- /dev/null
+++ b/apps/jitsi/.helmignore
@@ -0,0 +1,24 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*.orig
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
+.#*
diff --git a/apps/jitsi/Chart.yaml b/apps/jitsi/Chart.yaml
new file mode 100644
index 0000000..736d530
--- /dev/null
+++ b/apps/jitsi/Chart.yaml
@@ -0,0 +1,24 @@
+apiVersion: v2
+name: jitsi-ssl
+description: SSL enabled Jitsi
+
+# A chart can be either an 'application' or a 'library' chart.
+#
+# Application charts are a collection of templates that can be packaged into versioned archives
+# to be deployed.
+#
+# Library charts provide useful utilities or functions for the chart developer. They're included as
+# a dependency of application charts to inject those utilities and functions into the rendering
+# pipeline. Library charts do not define any templates and therefore cannot be deployed.
+type: application
+
+# This is the chart version. This version number should be incremented each time you make changes
+# to the chart and its templates, including the app version.
+# Versions are expected to follow Semantic Versioning (https://semver.org/)
+version: 0.1.0
+
+# This is the version number of the application being deployed. This version number should be
+# incremented each time you make changes to the application. Versions are not expected to
+# follow Semantic Versioning. They should reflect the version the application is using.
+# It is recommended to use it with quotes.
+appVersion: "stable-5870"
diff --git a/apps/jitsi/jitsi.yaml b/apps/jitsi/templates/jitsi.yaml
similarity index 99%
rename from apps/jitsi/jitsi.yaml
rename to apps/jitsi/templates/jitsi.yaml
index da61264..4462985 100644
--- a/apps/jitsi/jitsi.yaml
+++ b/apps/jitsi/templates/jitsi.yaml
@@ -148,7 +148,7 @@ spec:
             - name: JVB_TCP_HARVESTER_DISABLED
               value: "true"
         - name: web
-          image: jitsi/web:unstable-2021-06-23
+          image: jitsi/web:stable-5870
           imagePullPolicy: IfNotPresent
           env:
             - name: PUBLIC_URL
diff --git a/apps/jitsi/values.yaml b/apps/jitsi/values.yaml
new file mode 100644
index 0000000..67e04b5
--- /dev/null
+++ b/apps/jitsi/values.yaml
@@ -0,0 +1,9 @@
+clusterDomain: c2.k8s.ooo
+email: technik@ungleich.ch
+
+# Change to "no" to get a production certificate
+letsencryptStaging: "yes"
+
+# This is how the service and the data volumes are named - i.e. the
+identifier: "{{ .Release.Name }}"
+fqdn: "{{ .Release.Name }}.{{ .Release.Namespace }}.svc.{{ .Values.clusterDomain }}"