diff --git a/cloudflare-ddns/deployments.yaml b/cloudflare-ddns/deployments.yaml
new file mode 100644
index 0000000..08db841
--- /dev/null
+++ b/cloudflare-ddns/deployments.yaml
@@ -0,0 +1,63 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  annotations:
+    deployment.kubernetes.io/revision: '1'
+  name: cloudflare-ddns
+  namespace: cloudflare-ddns
+spec:
+  progressDeadlineSeconds: 600
+  replicas: 1
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      app: cloudflare-ddns
+  strategy:
+    rollingUpdate:
+      maxSurge: 25%
+      maxUnavailable: 25%
+    type: RollingUpdate
+  template:
+    metadata:
+      labels:
+        app: cloudflare-ddns
+    spec:
+      containers:
+      - env:
+        - name: CF_API_TOKEN
+          valueFrom:
+            secretKeyRef:
+              key: CF_API_TOKEN
+              name: cloudflare-ddns-secret
+        - name: DOMAINS
+          value: chemavx.xyz,n8n.chemavx.xyz,openclaw.chemavx.xyz
+        - name: PROXIED
+          value: 'false'
+        - name: UPDATE_CRON
+          value: '@every 5m'
+        image: favonia/cloudflare-ddns:latest
+        imagePullPolicy: Always
+        name: cloudflare-ddns
+        resources:
+          limits:
+            cpu: 50m
+            memory: 64Mi
+          requests:
+            cpu: 10m
+            memory: 32Mi
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
+          runAsNonRoot: true
+          runAsUser: 1000
+        terminationMessagePath: /dev/termination-log
+        terminationMessagePolicy: File
+      dnsPolicy: ClusterFirst
+      restartPolicy: Always
+      schedulerName: default-scheduler
+      securityContext: {}
+      terminationGracePeriodSeconds: 30
+