diff --git a/argocd/apps/openproject/openproject.yaml b/argocd/apps/openproject/openproject.yaml
new file mode 100644
index 0000000..a7f5469
--- /dev/null
+++ b/argocd/apps/openproject/openproject.yaml
@@ -0,0 +1,43 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: openproject
+  finalizers:
+  - resources-finalizer.argocd.argoproj.io
+spec:
+  project: default
+  source:
+    repoURL: 'https://charts.openproject.org'
+    targetRevision: 9.*.*
+    helm:
+      parameters:
+        - name: 'ingress.enabled'
+          value: 'true'
+        - name: config.publicUri
+          value: 'openproject.innovation-hub-niedersachsen.de'
+        - name: ingress.hosts[0]
+          value: 'openproject.innovation-hub-niedersachsen.de'
+        - name: 'ingress.tls[0].hosts[0]'
+          value: 'openproject.innovation-hub-niedersachsen.de'
+        - name: 'ingress.tls[0].secretName'
+          value: openproject-tls
+        - name: ingress.annotations.kubernetes\.io\/ingress\.class
+          value: traefik
+        - name: ingress.annotations.traefik\.ingress\.kubernetes\.io\/router\.tls
+          value: 'true'
+          forceString: true
+        - name: ingress.annotations.cert-manager\.io\/cluster-issuer
+          value: lets-encrypt
+    chart: openproject
+  destination:
+    server: 'https://kubernetes.default.svc'
+    namespace: openproject
+  syncPolicy:
+    managedNamespaceMetadata:
+      labels: 
+        pod-security.kubernetes.io/enforce: "privileged"
+    automated:
+      selfHeal: true
+      prune: true
+    syncOptions:
+      - CreateNamespace=true