diff --git a/apps/opensign/base/client-service.yaml b/apps/opensign/base/client-service.yaml
new file mode 100644
index 0000000..4b500a6
--- /dev/null
+++ b/apps/opensign/base/client-service.yaml
@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: opensign-client
+  namespace: opensign
+  labels:
+    app.kubernetes.io/name: opensign-client
+spec:
+  selector:
+    app.kubernetes.io/name: opensign-client
+  type: ClusterIP
+  internalTrafficPolicy: Cluster
+  ports:
+    - protocol: TCP
+      port: 10333
+      targetPort: 3000
+      name: http
diff --git a/apps/opensign/base/kustomization.yaml b/apps/opensign/base/kustomization.yaml
new file mode 100644
index 0000000..6fffec8
--- /dev/null
+++ b/apps/opensign/base/kustomization.yaml
@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ./mongo-service.yaml
+  - ./server-service.yaml
+  - ./client-service.yaml
\ No newline at end of file
diff --git a/apps/opensign/base/mongo-service.yaml b/apps/opensign/base/mongo-service.yaml
new file mode 100644
index 0000000..a4825e6
--- /dev/null
+++ b/apps/opensign/base/mongo-service.yaml
@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: opensign-mongo
+  namespace: opensign
+  labels:
+    app.kubernetes.io/name: opensign-mongo
+spec:
+  selector:
+    app.kubernetes.io/name: opensign-mongo
+  type: ClusterIP
+  internalTrafficPolicy: Cluster
+  ports:
+    - protocol: TCP
+      port: 27018
+      targetPort: 27017
+      name: db
diff --git a/apps/opensign/base/server-service.yaml b/apps/opensign/base/server-service.yaml
new file mode 100644
index 0000000..b5fa5b3
--- /dev/null
+++ b/apps/opensign/base/server-service.yaml
@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: opensign-server
+  namespace: opensign
+  labels:
+    app.kubernetes.io/name: opensign-server
+spec:
+  selector:
+    app.kubernetes.io/name: opensign-server
+  type: ClusterIP
+  internalTrafficPolicy: Cluster
+  ports:
+    - protocol: TCP
+      port: 10800
+      targetPort: 8080
+      name: http
diff --git a/apps/opensign/env/k3s-cluster/client-deployment.yaml b/apps/opensign/env/k3s-cluster/client-deployment.yaml
new file mode 100644
index 0000000..a8419bc
--- /dev/null
+++ b/apps/opensign/env/k3s-cluster/client-deployment.yaml
@@ -0,0 +1,43 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: opensign-client
+  namespace: opensign
+  labels:
+    app.kubernetes.io/name: opensign-client
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: opensign-client
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: opensign-client
+    spec:
+      securityContext:
+        runAsUser: 1000
+        runAsGroup: 1000
+      containers:
+        - name: opensign-client
+          image: edeedeeed/opensign-client:sha-d3e6107
+          command:
+            - "npm start"
+          envFrom:
+            - configMapRef:
+                name: opensign-env
+                optional: false
+            - secretRef:
+                name: opensign-secrets
+                optional: false
+          ports:
+            - protocol: TCP
+              containerPort: 3000
+              name: web
+          volumeMounts:
+            - name: client-app
+              mountPath: /usr/app
+      volumes:
+        - name: client-app
+          hostPath:
+            path: /mnt/nfs/AppData/opensign/client
+            type: Directory
diff --git a/apps/opensign/env/k3s-cluster/config.json b/apps/opensign/env/k3s-cluster/config.json
new file mode 100644
index 0000000..a0273ec
--- /dev/null
+++ b/apps/opensign/env/k3s-cluster/config.json
@@ -0,0 +1,12 @@
+{
+  "appName": "opensign",
+  "userGivenName": "opensign",
+  "namespace": "opensign",
+  "destNamespace": "opensign",
+  "destServer": "https://kubernetes.default.svc",
+  "srcPath": "apps/opensign/env/k3s-cluster",
+  "srcRepoURL": "https://github.com/3dwardch3ng/home-cluster-ops.git",
+  "srcTargetRevision": "",
+  "labels": null,
+  "annotations": null
+}
\ No newline at end of file
diff --git a/apps/opensign/env/k3s-cluster/env-configmap.yaml b/apps/opensign/env/k3s-cluster/env-configmap.yaml
new file mode 100644
index 0000000..2692776
--- /dev/null
+++ b/apps/opensign/env/k3s-cluster/env-configmap.yaml
@@ -0,0 +1,21 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: opensign-env
+data:
+  APP_ID: "opensign"
+
+  DO_REGION: "ap-southeast-2"
+  DO_SPACE: "opensign"
+  GENERATE_SOURCEMAP: "false"
+  MAILGUN_API_KEY: ""
+  MAILGUN_DOMAIN: "mail.yourdomain.com"
+  MAILGUN_SENDER: "postmaster@mail.yourdomain.com"
+  PARSE_MOUNT: "/app"
+  PUBLIC_URL: "https://opensign.cluster.edward.sydney"
+  REACT_APP_APPID: "opensign"
+  REACT_APP_SERVERURL: "https://server.opensign.cluster.edward.sydney/app"
+  SERVER_URL: "https://server.opensign.cluster.edward.sydney/app"
+  SMTP_ENABLE: "true"
+  USE_LOCAL: "true"
+  appName: "open_sign_server"
\ No newline at end of file
diff --git a/apps/opensign/env/k3s-cluster/ingress.yaml b/apps/opensign/env/k3s-cluster/ingress.yaml
new file mode 100644
index 0000000..2d08b9f
--- /dev/null
+++ b/apps/opensign/env/k3s-cluster/ingress.yaml
@@ -0,0 +1,31 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: opensign-ingress
+  namespace: opensign
+  annotations:
+    nginx.ingress.kubernetes.io/ssl-redirect: "false"
+    nginx.ingress.kubernetes.io/use-regex: "true"
+spec:
+  ingressClassName: nginx
+  rules:
+    - host: "server.opensign.cluster.edward.sydney"
+      http:
+        paths:
+          - pathType: Prefix
+            path: "/"
+            backend:
+              service:
+                name: opensign-server
+                port:
+                  number: 10800
+    - host: "opensign.cluster.edward.sydney"
+      http:
+        paths:
+          - pathType: Prefix
+            path: "/"
+            backend:
+              service:
+                name: opensign-client
+                port:
+                  number: 10333
\ No newline at end of file
diff --git a/apps/opensign/env/k3s-cluster/kustomization.yaml b/apps/opensign/env/k3s-cluster/kustomization.yaml
new file mode 100644
index 0000000..b72ab85
--- /dev/null
+++ b/apps/opensign/env/k3s-cluster/kustomization.yaml
@@ -0,0 +1,9 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../../base
+  - ./env-configmap.yaml
+  - ./mongo-deployment.yaml
+  - ./server-deployment.yaml
+  - ./client-deployment.yaml
+  - ./ingress.yaml
\ No newline at end of file
diff --git a/apps/opensign/env/k3s-cluster/mongo-deployment.yaml b/apps/opensign/env/k3s-cluster/mongo-deployment.yaml
new file mode 100644
index 0000000..24070e2
--- /dev/null
+++ b/apps/opensign/env/k3s-cluster/mongo-deployment.yaml
@@ -0,0 +1,34 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: opensign-mongo
+  namespace: opensign
+  labels:
+    app.kubernetes.io/name: opensign-mongo
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: opensign-mongo
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: opensign-mongo
+    spec:
+      securityContext:
+        runAsUser: 1000
+        runAsGroup: 1000
+      containers:
+        - name: opensign-mongo
+          image: edeedeeed/opensign-mongo:sha-d3e6107
+          ports:
+            - protocol: TCP
+              containerPort: 27017
+              name: api
+          volumeMounts:
+            - name: mongo-data
+              mountPath: /data/db
+      volumes:
+        - name: mongo-data
+          hostPath:
+            path: /mnt/nfs/AppData/opensign/mongo
+            type: Directory
diff --git a/apps/opensign/env/k3s-cluster/server-deployment.yaml b/apps/opensign/env/k3s-cluster/server-deployment.yaml
new file mode 100644
index 0000000..8e2b6ec
--- /dev/null
+++ b/apps/opensign/env/k3s-cluster/server-deployment.yaml
@@ -0,0 +1,46 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: opensign-server
+  namespace: opensign
+  labels:
+    app.kubernetes.io/name: opensign-server
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: opensign-server
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: opensign-server
+    spec:
+      securityContext:
+        runAsUser: 1000
+        runAsGroup: 1000
+      containers:
+        - name: opensign-server
+          image: edeedeeed/opensign-server:sha-d3e6107
+          command:
+            - "/usr/src/app/node_modules/.bin/nodemon server.js"
+          env:
+            - name: NODE_ENV
+              value: development
+          envFrom:
+            - configMapRef:
+                name: opensign-env
+                optional: false
+            - secretRef:
+                name: opensign-secrets
+                optional: false
+          ports:
+            - protocol: TCP
+              containerPort: 8080
+              name: server
+          volumeMounts:
+            - name: server-app
+              mountPath: /usr/src/app
+      volumes:
+        - name: server-app
+          hostPath:
+            path: /mnt/nfs/AppData/opensign/server
+            type: Directory
diff --git a/resources/app-secrets/env/k3s-cluster/templates/opensign.yaml b/resources/app-secrets/env/k3s-cluster/templates/opensign.yaml
new file mode 100644
index 0000000..cfe0b71
--- /dev/null
+++ b/resources/app-secrets/env/k3s-cluster/templates/opensign.yaml
@@ -0,0 +1,33 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  annotations:
+    sealedsecrets.bitnami.com/cluster-wide: "true"
+  creationTimestamp: null
+  name: opensign-secrets
+  namespace: opensign
+spec:
+  encryptedData:
+    DO_ACCESS_KEY_ID: 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
+    DO_BASEURL: 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
+    DO_ENDPOINT: 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
+    DO_SECRET_ACCESS_KEY: AgB0rR+DyBe70kBbtMItnZD1xP+FEvoWv3MXOq79BlQlt4PrV5CxGDRfEH7XLq/rdCKA/s60nG6xfp21eunKzaNnjwPOq38Z6uOwOxBrIl56Rek4CYC/pOFQ8i8NC/NMGxYPvz054djPpe1pulJSYQka070DPfnP3fWK3TUMs5w+xCtEaKupWPFV/X5b3oue5pJnVXefqMTd23WYt/e7aPxkyigYAxBeBXAHzoJjp+YcsAQpnnQNkZ9FcfaqUzYmzyGXOHvqjGZb8aAAQxi+AplA8kTQQfDHNFf3QIacUnEH3txjzjaCLofVC4JoKsr3GYD8FoZbym+tzw01Ur5x4UMDEL+hwnTCyd8VyrqVqTrAdE5Z9Maa+et1BTFavgsvHNIJJHgf7P+d9lVQlhyXY7atiQ/rDxNwR7OPdMWCLEBLGMiRsKWpZ0+Bn0C1UxCgWZxmZCej35zC6WAP3x1mN87MUg0M6o9K/FmciidXNxSAeYxfEbXfIYS16JNfT2+57jIujtRoEcJC/Yt4azl2KSLG5JiRThlPT0j3gEBSb21RmxiQvZPTGlv8g5X5TZJQKq+50iKxs5zlKVkwNjdLscxY3RNM+u46qyXOxyCQekueHfeldFVYaU1GjDIGyg40Jps3xDPaet97ATrxiINMrEyebWN3MJGnNq27+NzPRNi5ukun0QBVENfx9x+hvOu9d2virlda+1hNjTvL/VLuVxJdLtPz+U5pt3jKjxFOCO6ez0DE67XxUtRK
+    MASTER_KEY: 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
+    MONGODB_URI: AgBd1YNYAWDjQHQsoLNrapFN0u6YzYiX31bpG6cTPCM9OBi9eVWhExJNBy9Fo4em74QCJg4f/RdVQkGGgE6i/QK2lDiOy1P4j3VG+W7eS83igdq9pUnVhBFaTUf2k/qAl+0indQALroqo7Y9o5dZy1rds8ep5XPhqsdOPMQ3MeWgNmbYPAgHM7+A68DZMgyz4eCAZWvM5Mfa2/VArs7Kjw6CY+Hfy4niBbV3JSlYiQKiVGULl2Bd9ttJqUDksEfDfZWe/NUA5jTlRtB8ALjFn3QZW5fzSeGpWqUHZUzeojAd8mBrdX+0j6SLLWVT+wVtkRWN0CEDrQmbGm6sE5gPSwSx45b32l4CZI5tRW4HuRU+Pi3zTMitwTeze5DmrChPdUQlkAx8mAf80P4hdEfgkPFBAE8mHMabCdZc6REnLrRw73N4iwlM/6SKoHCgRPSgwEMLdGwb5Np0WHxlgccTetZZtuw5RspzhU0eceJ3rD+/miRLQsMBt8A76sKnJb67riJ0kPzh1yz9yMBQINYmjgavcuFJ1vPcW4OnKYLgNof4l8PJuyzV/q2c4uEa4ZJOsm8yJ1cJwDZeFi24YDbn40HENUm0gHTJECDv8pybuFg1066581RoT6L1T2p8sftF73ZHOYRNs6ron5k54ylfxDmiq46+sfN9ZaSoHH+ZILkfQU2XI8JhYTh5DDS9AbhkRFzWJkooK0NKfHyDUD3yqdbi3AIQSUE0fpgos/dER1+bzeh6Z7x4yGub5fHexnsoWKO7jA0Sl5NolgC+uO+hxH/ThkWeJA==
+    PASS_PHRASE: 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
+    PFX_BASE64: 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
+    SMTP_HOST: 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
+    SMTP_PASS: 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
+    SMTP_PORT: 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
+    SMTP_USER_EMAIL: AgABOiw+pWXmat3NTgqznjFrrnqrKdoy4wgNMI0DPxGPDPYiEsJcqDI/QpzYaP7OY3Nc0KArS/XO8N+taIQaU3kRVELwdhmDHAmD7KNJhvnF6h0T9U9sQpfM1gMwLpTcEbO7K2G+5dJP3OQDusA1De67mOp72N0eAhoUtPant0dwdeh5GKcjsDo3BEwbq9nyCCeWXt/EQZ54h3cdWWWslDOwRhRZvmjDQtyXpVznd6Cg86kwK/VCGwhjyUWZPux1AOeYCcS4nzeuZw1DlG1I8ghjlwbv7b7+MHef76dLGmqufNoZi3nWsUohGkObuwDKziVzitQaEoWbc8hHMBo3/jfEyduRAhpikcSBG5w7DlGF87QLvwMxQH09gMSSlXTYeusCLKOeVISWPlNRmQU8X3jdw50t8g2kIokkmlEJFOnGNczRbiQruGwW/Ij6fIFWd13z4XgWEJF3ARM8rM70L61RtSidQwbY5/kmqteUvGYDZSOUQf7npo3jYeqFnYzTx8INGDa8Lv3aWNMoEa2nh92W9gW+CYRxe378DxBSlZmPYc2S7HR1QJTByE/B7CpOOQMRU5uIaVskFLBxRMGFHWrxmbDFHw2rnHvu+tobdL8XJwnXs7tRQl83VJEiC0A5dLAVBlN121TrWq7P4Nk6FXctgPdFWD/VjaJBSJkGUgavwj2a0dYrG1dzF7iFidL1Mza5H4ZMPIZkewdxNftM8V5d
+  template:
+    metadata:
+      annotations:
+        argocd.argoproj.io/sync-options: Prune=false
+        sealedsecrets.bitnami.com/cluster-wide: "true"
+        sealedsecrets.bitnami.com/managed: "true"
+      creationTimestamp: null
+      name: opensign-secrets
+      namespace: opensign
+    type: Opaque
diff --git a/resources/namespaces/env/k3s-cluster/templates/opensign.yaml b/resources/namespaces/env/k3s-cluster/templates/opensign.yaml
new file mode 100644
index 0000000..b0cf13d
--- /dev/null
+++ b/resources/namespaces/env/k3s-cluster/templates/opensign.yaml
@@ -0,0 +1,9 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  annotations:
+    argocd.argoproj.io/sync-options: Prune=false
+  creationTimestamp: null
+  name: opensign
+spec: {}
+status: {}