diff --git a/apps/system/external-dns.yaml b/apps/system/external-dns.yaml
new file mode 100644
index 0000000..2045b29
--- /dev/null
+++ b/apps/system/external-dns.yaml
@@ -0,0 +1,39 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: external-dns
+  namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-wave: "-999"
+spec:
+  project: system
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true
+  destination:
+    server: "https://kubernetes.default.svc"
+    namespace: external-dns
+  source:
+    chart: external-dns
+    repoURL: https://kubernetes-sigs.github.io/external-dns/
+    targetRevision: 1.15.0
+    helm:
+      releaseName: external-dns
+      valuesObject:
+        provider:
+          name: cloudflare
+        env:
+          - name: CF_API_TOKEN
+            valueFrom:
+              secretKeyRef:
+                name: cloudflare-api-token
+                key: token
+        extraArgs:
+          - --cloudflare-dns-records-per-page=1000
+        txtOwnerId: cthulhu
+        txtPrefix: cthulhu-
+        sources:
+          - ingress