diff --git a/home-k8s/home-applications.yaml b/home-k8s/home-applications.yaml
new file mode 100644
index 0000000..b168eb7
--- /dev/null
+++ b/home-k8s/home-applications.yaml
@@ -0,0 +1,57 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: nas-proxy
+spec:
+  ports:
+  - port: 80
+    targetPort: 80
+  selector:
+    app: nas-proxy
+---
+
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: nas-proxy
+spec:
+  selector:
+    matchLabels:
+      app: nas-proxy
+  replicas: 1
+  template:
+    metadata:
+      labels:
+        app: nas-proxy
+    spec:
+      containers:
+      - name: nas-proxy
+        image: alpine/socat
+        args:
+          - "tcp-listen:80,fork,reuseaddr"
+          - "tcp-connect:192.168.1.4:8080"
+        ports:
+        - containerPort: 80
+---
+
+apiVersion: networking.k8s.io/v1beta1
+kind: Ingress
+metadata:
+  name: nas-ingress
+  annotations:
+    kubernetes.io/ingress.class: "nginx"
+    kubernetes.io/tls-acme: "true"
+    cert-manager.io/cluster-issuer: "letsencrypt-prod"
+spec:
+  tls:
+  - hosts:
+    - nas.home.toozhao.com
+    secretName: nas-tls
+  rules:
+  - host: nas.home.toozhao.com
+    http:
+      paths:
+      - backend:
+          serviceName: nas-proxy
+          servicePort: 80
+        path: /