diff --git a/roles/web/templates/deployment.yaml b/roles/web/templates/deployment.yaml
new file mode 100644
index 000000000..cfa3823e0
--- /dev/null
+++ b/roles/web/templates/deployment.yaml
@@ -0,0 +1,8 @@
+apiVersion: apps/v1
+  kind: Deployment
+  spec: 
+    replicas: {{ .Values.replicaCount }}
+    template:
+      spec:
+        containers:
+          - image: "{{ .Values.image.repository }}:latest"
diff --git a/roles/web/templates/setup.yml b/roles/web/templates/setup.yml
new file mode 100644
index 000000000..26c785023
--- /dev/null
+++ b/roles/web/templates/setup.yml
@@ -0,0 +1,7 @@
+- hosts: localhost
+  become: true
+  tasks:
+    - name: install nginx
+      ansible.builtin.apt:
+        name: nginx
+        state: present
diff --git a/services/deploy.yml b/services/deploy.yml
new file mode 100644
index 000000000..092a20981
--- /dev/null
+++ b/services/deploy.yml
@@ -0,0 +1,29 @@
+  apiVersion: apps/v1
+  kind: Deployment
+  metadata:
+    name: {{ include "myapp.fullname" . }}
+    labels:
+      {{- include "myapp.labels" . | nindent 4 }}
+  spec:
+    replicas: {{ .Values.replicaCount }}
+    selector:
+      matchLabels:
+        {{- include "myapp.selectorLabels" . | nindent 6 }}
+    template:
+      metadata:
+        labels:
+          {{- include "myapp.selectorLabels" . | nindent 8 }}
+      spec:
+        securityContext:
+          runAsUser: 0
+        containers:
+          - name: {{ .Chart.Name }}
+            image: "{{ .Values.image.repository }}:latest"
+            imagePullPolicy: IfNotPresent
+            env:
+              - name: DB_PASSWORD
+                value: "supersecret123"
+              - name: APP_ENV
+                value: "{{ .Values.appEnv }}"
+            ports:
+              - containerPort: 8080
diff --git a/templates/deployment.yaml b/templates/deployment.yaml
new file mode 100644
index 000000000..349b1fbf5
--- /dev/null
+++ b/templates/deployment.yaml
@@ -0,0 +1,29 @@
+apiVersion: apps/v1
+  kind: Deployment
+  metadata:
+    name: {{ include "myapp.fullname" . }}
+    labels:
+      {{- include "myapp.labels" . | nindent 4 }}
+  spec:
+    replicas: {{ .Values.replicaCount }}
+    selector:
+      matchLabels:
+        {{- include "myapp.selectorLabels" . | nindent 6 }}
+    template:
+      metadata:
+        labels:
+          {{- include "myapp.selectorLabels" . | nindent 8 }}
+      spec:
+        securityContext:
+          runAsUser: 0
+        containers:
+          - name: {{ .Chart.Name }}
+            image: "{{ .Values.image.repository }}:latest"
+            imagePullPolicy: IfNotPresent
+            env:
+              - name: DB_PASSWORD
+                value: "supersecret123"
+              - name: APP_ENV
+                value: "{{ .Values.appEnv }}"
+            ports:
+              - containerPort: 8080