diff --git a/infrastructure/eso/helmrelease.yaml b/infrastructure/eso/helmrelease.yaml
new file mode 100644
index 0000000..63a763c
--- /dev/null
+++ b/infrastructure/eso/helmrelease.yaml
@@ -0,0 +1,19 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: external-secrets
+  namespace: external-secrets
+spec:
+  interval: 5m
+  chart:
+    spec:
+      chart: external-secrets
+      version: ">=0.9.0"
+      sourceRef:
+        kind: HelmRepository
+        name: external-secrets
+        namespace: flux-system
+  install:
+    createNamespace: true
+  upgrade:
+    createNamespace: true
diff --git a/infrastructure/eso/kustomization.yaml b/infrastructure/eso/kustomization.yaml
new file mode 100644
index 0000000..e0425d9
--- /dev/null
+++ b/infrastructure/eso/kustomization.yaml
@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- helmrelease.yaml
diff --git a/infrastructure/kustomization.yaml b/infrastructure/kustomization.yaml
index 2512548..d83ae24 100644
--- a/infrastructure/kustomization.yaml
+++ b/infrastructure/kustomization.yaml
@@ -3,4 +3,5 @@ kind: Kustomization
 resources:
 - bitwarden
 - sources
+- eso
 #- velero
diff --git a/infrastructure/sources/eso.yaml b/infrastructure/sources/eso.yaml
new file mode 100644
index 0000000..1128f31
--- /dev/null
+++ b/infrastructure/sources/eso.yaml
@@ -0,0 +1,8 @@
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: external-secrets
+  namespace: flux-system
+spec:
+  interval: 1h
+  url: https://charts.external-secrets.io
diff --git a/infrastructure/sources/kustomization.yaml b/infrastructure/sources/kustomization.yaml
index e95cf5c..da6548e 100644
--- a/infrastructure/sources/kustomization.yaml
+++ b/infrastructure/sources/kustomization.yaml
@@ -3,4 +3,5 @@ kind: Kustomization
 resources:
 - robjuz.yaml
 - wikijs.yaml
-- bitwarden.yaml
\ No newline at end of file
+- bitwarden.yaml
+- eso.yaml