diff --git a/.gitignore b/.gitignore
index 795420e..67ce69a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -7,4 +7,4 @@ memory.sqlite3
 /voice
 /.idea
 Cargo.lock
-k8s-deploy.yaml
+k8s/k8s-deploy.yaml
diff --git a/k8s/k8s-deploy-example.yaml b/k8s/k8s-deploy-example.yaml
new file mode 100644
index 0000000..7ff2b9b
--- /dev/null
+++ b/k8s/k8s-deploy-example.yaml
@@ -0,0 +1,43 @@
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: desubot-api-token
+data:
+  token: 123.... # Base64 encoded token.
+---
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: desubot
+spec:
+  serviceName: "desubot"
+  replicas: 1
+  selector:
+    matchLabels:
+      app: desubot
+  template:
+    metadata:
+      labels:
+        app: desubot
+    spec:
+      containers:
+      - name: desubot
+        image: ultradesu/desubot:latest
+        volumeMounts:
+        - name: storage
+          mountPath: /storage
+        env:
+        - name: TELEGRAM_BOT_TOKEN
+          valueFrom:
+            secretKeyRef:
+              name: desubot-api-token
+              key: token
+  volumeClaimTemplates:
+  - metadata:
+      name: storage
+    spec:
+      accessModes: [ "ReadWriteOnce" ]
+      resources:
+        requests:
+          storage: 50Gi