diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 80f6eeb..565b62f 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -46,6 +46,7 @@ updates:
       - "/kubernetes/code/gitea"
       - "/kubernetes/code/harbor"
       - "/kubernetes/home/home-assisant"
+      - "/kubernetes/home/zigbee2mqtt"
       - "/kubernetes/infrastructure/authentik"
       - "/kubernetes/personal/linkwarden"
       - "/kubernetes/personal/notesnook"
@@ -54,4 +55,5 @@ updates:
       - "/kubernetes/system/csi-driver-nfs"
       - "/kubernetes/system/external-dns"
       - "/kubernetes/system/traefik"
+      - "/kubernetes/tools/dashy"
       - "/kubernetes/tools/glance"
diff --git a/kubernetes/tools/dashy/kustomization.yaml b/kubernetes/tools/dashy/kustomization.yaml
new file mode 100644
index 0000000..5443e2c
--- /dev/null
+++ b/kubernetes/tools/dashy/kustomization.yaml
@@ -0,0 +1,13 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: dashy
+resources:
+  - namespace.yaml
+  - repository.yaml
+  - release.yaml
+secretGenerator:
+  - name: dashy-values
+    files:
+      - values.yaml=values.yaml
+configurations:
+  - kustomizeconfig.yaml
diff --git a/kubernetes/tools/dashy/kustomizeconfig.yaml b/kubernetes/tools/dashy/kustomizeconfig.yaml
new file mode 100644
index 0000000..3365acc
--- /dev/null
+++ b/kubernetes/tools/dashy/kustomizeconfig.yaml
@@ -0,0 +1,6 @@
+nameReference:
+- kind: Secret
+  version: v1
+  fieldSpecs:
+  - path: spec/valuesFrom/name
+    kind: HelmRelease
diff --git a/kubernetes/tools/dashy/namespace.yaml b/kubernetes/tools/dashy/namespace.yaml
new file mode 100644
index 0000000..875e801
--- /dev/null
+++ b/kubernetes/tools/dashy/namespace.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: dashy
diff --git a/kubernetes/tools/dashy/release.yaml b/kubernetes/tools/dashy/release.yaml
new file mode 100644
index 0000000..41c3f1a
--- /dev/null
+++ b/kubernetes/tools/dashy/release.yaml
@@ -0,0 +1,19 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: dashy
+  namespace: dashy
+spec:
+  interval: 1m
+  chart:
+    spec:
+      reconcileStrategy: Revision
+      sourceRef:
+        kind: HelmRepository
+        name: dashy
+        namespace: dashy
+      chart: dashy
+      interval: 1m
+  valuesFrom:
+    - kind: Secret
+      name: dashy-values
diff --git a/kubernetes/tools/dashy/repository.yaml b/kubernetes/tools/dashy/repository.yaml
new file mode 100644
index 0000000..4bb5501
--- /dev/null
+++ b/kubernetes/tools/dashy/repository.yaml
@@ -0,0 +1,8 @@
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: dashy
+  namespace: dashy
+spec:
+  interval: 1m
+  url: https://krzwiatrzyk.github.io/charts/
diff --git a/kubernetes/tools/dashy/values.yaml b/kubernetes/tools/dashy/values.yaml
new file mode 100644
index 0000000..6b04952
--- /dev/null
+++ b/kubernetes/tools/dashy/values.yaml
@@ -0,0 +1,34 @@
+ingressRoute:
+    main:
+        enabled: true
+        hosts:
+            - host: dashy.lan
+              paths:
+                - path: /
+                  pathType: prefix
+sops:
+    lastmodified: "2026-01-18T00:16:51Z"
+    mac: ENC[AES256_GCM,data:J8ztKcQ+hK/LQT4H8iygc7tfjc8H7pMRRF/38Ly1r3SbrYZ2Yo79aUhVjkZUuO46OSNPgxn5MY/Krvjs087kVruxihWFO4tJ1mP6XIf5qe26sSmifEX9v1/ZnvGDB9NbMx0ResrhqqyB8uZo5cpcFuYF2MA5fZO1eGy71kJu4rU=,iv:eQdxbqyCT+oLQvjwGUK/8volvO0CRMeqyorn58qslq0=,tag:+nNgbpNJauZQFhdws4C1GA==,type:str]
+    pgp:
+        - created_at: "2026-01-18T00:16:51Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA7uy4qQr71wiAQ/8C/4cUpuI+wXwawD1p5No5vPiiMFGf7tQUxtzIwjqpNc9
+            8dpNnvk4NFvuntrw/4+o5IgnFmxBjR41CgmG8U9YxBkxKeK13ia4Z31dfFWP28Fx
+            17Kvn8mZBpQhslTTaNCfqSrH2dDqraQwyCS3ZNOYOKpj+4bHAaaX8fruFXrogqQM
+            gCyo2icY5Nwo5RA730c0X5mFh7C/DCwXP+Uj9YlEWpY0otaHhX/HeNnEUnH4egMB
+            QITy0ouCWtrGwW1HcKl+McrFA9Ic/qw+tm+terllPkqxfDa1O9B1rsh8o1pTcYaM
+            JzZyrZsgpzI2J9Zp2Sb4qQ8Wlb/cuDZQLvK1CQ3Vc45qUcrGwgINaWdmzM9bv/ZA
+            hAhzGE+7vAS02q16OG2gRIujChlL95IlRMIfOF9sTglcE0j4N1/Nc9CgxP8MUO+6
+            zwoY+MQ5urdPadAB4WSutRneiDcLWmn24XKI44eJ/Vd3S/GoOq7LCNy9sU/Fpymo
+            cc9xfCCNgtNsErTC4PIKS9z5hfYXIvRs8sTzvUS7vfbNDv1dSgxagl79YiQoiJ/g
+            JgoS7mBvpV5DwyXjsuUlyjSrz3QjvltajX0T12ahHF/ercBE3ddGirUDUDYeHu32
+            +LaHFW84pDFRPI8OAJ6bN3M0wa+k1rToCOJMFSXGddbIieGB78SmVAjgYrvhL2TS
+            XgHRMDYdkgHw8s47NaFH08Rb2yMUmQCY1CF1IGZpeDuKADhtGki6c46FJh/qLpwU
+            MXwdeyhSgZle7Orr3rrJBYD6xK2q9jg07bsq7TwOL98Y8BkWf/hLHd5jAMzz01I=
+            =XjBN
+            -----END PGP MESSAGE-----
+          fp: DC6910268E657FF70BA7EC289974494E76938DDC
+    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
+    version: 3.10.2