diff --git a/helm/istio/templates/gateway.yaml b/helm/istio/templates/gateway.yaml
new file mode 100644
index 0000000..41b1ee2
--- /dev/null
+++ b/helm/istio/templates/gateway.yaml
@@ -0,0 +1,29 @@
+apiVersion: networking.istio.io/v1
+kind: Gateway
+metadata:
+  name: my-gateway
+  namespace: some-config-namespace
+spec:
+  selector:
+    app: my-gateway-controller
+  servers:
+  - port:
+      number: 80
+      name: http
+      protocol: HTTP
+    hosts:
+    - '*.apps.linvogel.internal'
+    - '*.apps.linvogel.ch'
+    tls:
+      httpsRedirect: true # sends 301 redirect for http requests
+  - port:
+      number: 443
+      name: https
+      protocol: HTTPS
+    hosts:
+    - '*.apps.linvogel.internal'
+    - '*.apps.linvogel.ch'
+    tls:
+      mode: SIMPLE # enables HTTPS on this port
+      serverCertificate: /etc/certs/servercert.pem
+      privateKey: /etc/certs/privatekey.pem