diff --git a/clusters/ipv6/external-resources/pihole/pihole-endpoint.yml b/clusters/ipv6/external-resources/pihole/pihole-endpoint.yml
new file mode 100644
index 0000000..6595859
--- /dev/null
+++ b/clusters/ipv6/external-resources/pihole/pihole-endpoint.yml
@@ -0,0 +1,13 @@
+---
+apiVersion: v1
+kind: Endpoints
+metadata:
+  name: pihole
+  namespace: external-resources
+subsets:
+  - addresses:
+      - ip: 192.168.1.19
+    ports:
+      - name: http
+        protocol: TCP
+        port: 80
diff --git a/clusters/ipv6/external-resources/pihole/pihole-ingress.yml b/clusters/ipv6/external-resources/pihole/pihole-ingress.yml
new file mode 100644
index 0000000..4814f93
--- /dev/null
+++ b/clusters/ipv6/external-resources/pihole/pihole-ingress.yml
@@ -0,0 +1,27 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: pihole-ingress
+  namespace: external-resources
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-cloudflare
+    traefik.ingress.kubernetes.io/router.middlewares: tools-authelia@kubernetescrd
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
+spec:
+  ingressClassName: traefik
+  tls:
+  - hosts:
+    - pihole.akshun-lab.cc
+    secretName: pihole-tls
+  rules:
+  - host: pihole.akshun-lab.cc
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: pihole
+            port:
+              number: 80
diff --git a/clusters/ipv6/external-resources/pihole/pihole-svc.yml b/clusters/ipv6/external-resources/pihole/pihole-svc.yml
new file mode 100644
index 0000000..bf78822
--- /dev/null
+++ b/clusters/ipv6/external-resources/pihole/pihole-svc.yml
@@ -0,0 +1,13 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: pihole
+  namespace: external-resources
+spec:
+  ports:
+  - name: http
+    port: 80
+    targetPort: 80
+    protocol: TCP
+  clusterIP: None