diff --git a/badhouseplants/helmfile.yaml b/badhouseplants/helmfile.yaml
index e535da1..0d2b132 100644
--- a/badhouseplants/helmfile.yaml
+++ b/badhouseplants/helmfile.yaml
@@ -42,6 +42,11 @@ releases:
     namespace: funkwhale-application
     createNamespace: false
 
+  - <<: *mailu
+    installed: true
+    namespace: mailu-application
+    createNamespace: true
+
 bases:
   - ../environments.yaml
   - ../repositories.yaml
diff --git a/badhouseplants/values/secrets.mailu.yaml b/badhouseplants/values/secrets.mailu.yaml
new file mode 100644
index 0000000..b9616df
--- /dev/null
+++ b/badhouseplants/values/secrets.mailu.yaml
@@ -0,0 +1,25 @@
+secretKey: ENC[AES256_GCM,data:AY41e2XkC0e32L/9MWxK4YkbeGj/piZpgIGjU7Bd,iv:3DRmPKD3YHgqizBq2EAy/BC0qc0mSmpLLMCxRXdakRc=,tag:HgnEjhISDMqUkoObbpf3NA==,type:str]
+initialAccount:
+    username: ENC[AES256_GCM,data:ugeeeEKt/m4=,iv:M/7s36QP7o/m2rxtdsVcl4qd5opvQvznhHvI0cD2g90=,tag:NW7+HVa923/Nams8+Qw1QQ==,type:str]
+    domain: ENC[AES256_GCM,data:T5w/nPrq36iwZQdYHMQkisY1,iv:7EskbKJfRXMhkKZBgHy6nP8r1epcf7bNi8gAp4qY5TI=,tag:nZ+0BhvIy9Ap88SHaKhSvw==,type:str]
+    password: ENC[AES256_GCM,data:5MxZgd275wrm0fiery2n31sfEtwu8zxzqnuoGpv5,iv:fXtmmzwPxfeIOYLfbUJN1oe6v1TsR/y3ReoDjYibefY=,tag:lqB8yym/Vz58D26J7Ao7mA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGa1lRY0tQUk05WmpINVVw
+            YkJkVDA0QlZibHFmbDdPTHpGTTY5N0JodXljCm14aVVSUm43MXo3d0ZlYWRUMXhh
+            b1VqRHZXUTArbDNpRG9VY1U1a281ZW8KLS0tIHV6NWZQdzVzWFdJU0ErQy9WTFMv
+            RjVVYmRKcERYZVhMT0ViZzR5cm8rMTgKizZBRrU/WauUmFYm9fnouiegNkYZkudp
+            QpOha6CggN8rItelbnWMHlzGZBzM+77mFocuGmvNuTY/YGSkXfLjLA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2023-04-21T12:47:54Z"
+    mac: ENC[AES256_GCM,data:erMUPtaX67xTGbJAB2aCi3J+j2Sjc9HRLQR+U139nrEoGCOAAes+OvyhrSlpW59pH58V6ltwUUxn1aoI5GF79HaTUK2uLQ+5Gy8jIjxgF1okYJfQFzVsZJPIasxr1fZmYewnsiUU9iNqmxLm6W6GbuMzO8dN5o6LHzceJn8cjj4=,iv:ryDfDqfXuNbqu3ju/wgz1ke4eAYsXLYp1lv91MeiIoc=,tag:1Wb/XyG4P/dybrhHuQ1LAg==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.7.3
diff --git a/badhouseplants/values/values.mailu.yaml b/badhouseplants/values/values.mailu.yaml
new file mode 100644
index 0000000..c7d3d49
--- /dev/null
+++ b/badhouseplants/values/values.mailu.yaml
@@ -0,0 +1,98 @@
+hostnames:
+  - mail.badhouseplants.net
+  - imap.badhouseplants.net
+domain: badhouseplants.net
+persistence:
+  single_pvc: false
+ingress:
+  tls: true
+  selfSigned: true
+  #  tlsFlavor: mail-letsencrypt
+  #  externalIngress: false
+  #  annotations:
+  #    kubernetes.io/ingress.class: istio
+admin:
+  resources:
+    requests:
+      memory: 100Mi
+      cpu: 70m
+    limits:
+      memory: 700Mi
+      cpu: 400m
+  persistence:
+    size: 1Gi
+redis:
+  resources:
+    requests:
+      memory: 100Mi
+      cpu: 70m
+    limits:
+      memory: 200Mi
+      cpu: 200m 
+  persistence:
+    size: 1Gi
+postfix:
+  resources:
+    requests:
+      memory: 100Mi
+      cpu: 70m
+    limits:
+      memory: 200Mi
+      cpu: 200m 
+  persistence:
+    size: 1Gi
+dovecot:
+  resources:
+    requests:
+      memory: 100Mi
+      cpu: 70m
+    limits:
+      memory: 200Mi
+      cpu: 200m 
+  persistence:
+    size: 1Gi
+roundcube:
+  resources:
+    requests:
+      memory: 100Mi
+      cpu: 70m
+    limits:
+      memory: 200Mi
+      cpu: 200m 
+  persistence:
+    size: 1Gi
+mysql:
+  enabled: false
+postgresql:
+  enabled: true
+  auth:
+    enablePostgresUser: true
+    username: mailu
+    database: mailu
+  persistence:
+    enabled: false
+    storageClass: ""
+    accessMode: ReadWriteOnce
+    size: 1Gi
+rspamd:
+  logLevel: DEBUG
+  resources:
+    requests:
+      memory: 100Mi
+      cpu: 100m
+    limits:
+      memory: 500Mi
+      cpu: 400m
+  startupProbe: 
+    periodSeconds: 30
+    failureThreshold: 900
+    timeoutSeconds: 20
+  livenessProbe: {}
+  readinessProbe: {}
+webmail:
+  persistence:
+    size: 1Gi
+    storageClass: ""
+    accessModes: [ReadWriteOnce]
+    claimNameOverride: ""
+    annotations: {}