diff --git a/clusters/ipv6/external-resources/pbs/pbs-endpoint.yml b/clusters/ipv6/external-resources/pbs/pbs-endpoint.yml
new file mode 100644
index 0000000..a2908b1
--- /dev/null
+++ b/clusters/ipv6/external-resources/pbs/pbs-endpoint.yml
@@ -0,0 +1,13 @@
+---
+apiVersion: v1
+kind: Endpoints
+metadata:
+  name: pbs
+  namespace: external-resources
+subsets:
+  - addresses:
+      - ip: 192.168.1.112
+    ports:
+      - name: https
+        protocol: TCP
+        port: 8007
diff --git a/clusters/ipv6/external-resources/pbs/pbs-ingress.yml b/clusters/ipv6/external-resources/pbs/pbs-ingress.yml
new file mode 100644
index 0000000..9fc0da0
--- /dev/null
+++ b/clusters/ipv6/external-resources/pbs/pbs-ingress.yml
@@ -0,0 +1,27 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: pbs-ingress
+  namespace: external-resources
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-cloudflare
+    traefik.ingress.kubernetes.io/router.middlewares: tools-authelia@kubernetescrd
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
+spec:
+  ingressClassName: traefik
+  tls:
+  - hosts:
+    - pbs.akshun-lab.cc
+    secretName: pbs-tls
+  rules:
+  - host: pbs.akshun-lab.cc
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: pbs
+            port:
+              number: 8007
diff --git a/clusters/ipv6/external-resources/pbs/pbs-svc.yml b/clusters/ipv6/external-resources/pbs/pbs-svc.yml
new file mode 100644
index 0000000..167a1dd
--- /dev/null
+++ b/clusters/ipv6/external-resources/pbs/pbs-svc.yml
@@ -0,0 +1,16 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: pbs
+  namespace: external-resources
+  annotations:
+    traefik.ingress.kubernetes.io/service.serversscheme: https
+    traefik.ingress.kubernetes.io/service.serverstransport: external-resources-insecure-transport@kubernetescrd
+spec:
+  ports:
+  - name: https
+    port: 8007
+    targetPort: 8007
+    protocol: TCP
+  clusterIP: None