diff --git a/argocd/apps/matrix-t0rt1k.yaml b/argocd/apps/matrix-t0rt1k.yaml
new file mode 100644
index 0000000..2888561
--- /dev/null
+++ b/argocd/apps/matrix-t0rt1k.yaml
@@ -0,0 +1,89 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: matrix-t0rt1k
+  namespace: argocd
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
+spec:
+  project: default
+  sources:
+    - repoURL: http://gitea.gitea.svc.cluster.local:3000/admin/main.git
+      targetRevision: master
+      path: manifests/matrix-t0rt1k
+      directory:
+        recurse: true
+        include: "*.yaml"
+    - repoURL: ghcr.io
+      chart: element-hq/ess-helm/matrix-stack
+      targetRevision: 26.6.1
+      helm:
+        values: |
+          serverName: t0rt1k.tech
+
+          certManager:
+            clusterIssuer: letsencrypt-production
+
+          ingress:
+            className: traefik
+
+          postgres:
+            enabled: false
+
+          synapse:
+            postgres:
+              host: shared-pg-rw.cnpg.svc.cluster.local
+              database: synapse_t0rt1k
+              user: synapse_t0rt1k
+              password:
+                secret: pg-creds
+                secretKey: synapse
+            media:
+              storage:
+                size: 10Gi
+            ingress:
+              host: matrix.t0rt1k.tech
+
+          matrixAuthenticationService:
+            postgres:
+              host: shared-pg-rw.cnpg.svc.cluster.local
+              database: mas_t0rt1k
+              user: mas_t0rt1k
+              password:
+                secret: pg-creds
+                secretKey: mas
+            ingress:
+              host: auth.t0rt1k.tech
+
+          elementWeb:
+            ingress:
+              host: chat.t0rt1k.tech
+
+          elementAdmin:
+            ingress:
+              host: admin.t0rt1k.tech
+
+          matrixRTC:
+            ingress:
+              host: rtc.t0rt1k.tech
+            sfu:
+              manualIP: "81.26.181.240"
+              useStunToDiscoverPublicIP: false
+              exposedServices:
+                rtcTcp:
+                  port: 30007
+                  portType: NodePort
+                  nodePort: ""
+                rtcMuxedUdp:
+                  port: 30006
+                  portType: NodePort
+                  nodePort: ""
+
+          hookshot:
+            enabled: true
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: matrix-t0rt1k
+  syncPolicy:
+    syncOptions:
+      - CreateNamespace=true
diff --git a/argocd/apps/traefik.yaml b/argocd/apps/traefik.yaml
index b02e306..2dcddf1 100644
--- a/argocd/apps/traefik.yaml
+++ b/argocd/apps/traefik.yaml
@@ -33,6 +33,8 @@ spec:
           - "--entryPoints.ssh.address=:2222/tcp"
           - "--entryPoints.rtc-tcp-mrt0rtikize.address=:30009/tcp"
           - "--entryPoints.rtc-udp-mrt0rtikize.address=:30008/udp"
+          - "--entryPoints.rtc-tcp-t0rt1k.address=:30007/tcp"
+          - "--entryPoints.rtc-udp-t0rt1k.address=:30006/udp"
           - "--providers.kubernetesingress.ingressclass=traefik"
           - "--providers.kubernetesingress.ingressendpoint.publishedservice=traefik/traefik"
           - "--accesslog=true"
@@ -69,6 +71,18 @@ spec:
             protocol: UDP
             expose:
               default: true
+          rtc-tcp-t0rt1k:
+            port: 30007
+            exposedPort: 30007
+            protocol: TCP
+            expose:
+              default: true
+          rtc-udp-t0rt1k:
+            port: 30006
+            exposedPort: 30006
+            protocol: UDP
+            expose:
+              default: true
           metrics:
             port: 9100
             expose:
diff --git a/manifests/matrix-t0rt1k/ingressroute-rtc-tcp.yaml b/manifests/matrix-t0rt1k/ingressroute-rtc-tcp.yaml
new file mode 100644
index 0000000..550e807
--- /dev/null
+++ b/manifests/matrix-t0rt1k/ingressroute-rtc-tcp.yaml
@@ -0,0 +1,13 @@
+apiVersion: traefik.io/v1alpha1
+kind: IngressRouteTCP
+metadata:
+  name: rtc-tcp
+  namespace: matrix-t0rt1k
+spec:
+  entryPoints:
+    - rtc-tcp-t0rt1k
+  routes:
+    - match: HostSNI(`*`)
+      services:
+        - name: matrix-t0rt1k-matrix-rtc-sfu-tcp
+          port: 30007
diff --git a/manifests/matrix-t0rt1k/ingressroute-rtc-udp.yaml b/manifests/matrix-t0rt1k/ingressroute-rtc-udp.yaml
new file mode 100644
index 0000000..20dace5
--- /dev/null
+++ b/manifests/matrix-t0rt1k/ingressroute-rtc-udp.yaml
@@ -0,0 +1,12 @@
+apiVersion: traefik.io/v1alpha1
+kind: IngressRouteUDP
+metadata:
+  name: rtc-udp
+  namespace: matrix-t0rt1k
+spec:
+  entryPoints:
+    - rtc-udp-t0rt1k
+  routes:
+    - services:
+        - name: matrix-t0rt1k-matrix-rtc-sfu-muxed-udp
+          port: 30006