diff --git a/charts/website/Chart.lock b/charts/website/Chart.lock
new file mode 100644
index 0000000..2b3cf9b
--- /dev/null
+++ b/charts/website/Chart.lock
@@ -0,0 +1,6 @@
+dependencies:
+- name: common
+  repository: https://bjw-s-labs.github.io/helm-charts
+  version: 5.0.1
+digest: sha256:99ecf11b32f1a7153194a31a68856534e02ed6c961d736780d28af920254e179
+generated: "2026-07-15T14:53:26.335434+08:00"
diff --git a/charts/website/Chart.yaml b/charts/website/Chart.yaml
new file mode 100644
index 0000000..e573c54
--- /dev/null
+++ b/charts/website/Chart.yaml
@@ -0,0 +1,17 @@
+apiVersion: v2
+name: website
+description: Fillcode website Helm Chart
+type: application
+version: 0.0.1
+appVersion: "0.0.1"
+kubeVersion: ">=1.31.0-0"
+home: https://fillcode.com
+sources:
+  - https://git.dev.cm/fillcode.com/website
+maintainers:
+  - name: dev.cm
+    email: admin@dev.cm
+dependencies:
+  - name: common
+    version: 5.0.1
+    repository: https://bjw-s-labs.github.io/helm-charts
diff --git a/charts/website/templates/common.yaml b/charts/website/templates/common.yaml
new file mode 100644
index 0000000..bddae50
--- /dev/null
+++ b/charts/website/templates/common.yaml
@@ -0,0 +1,12 @@
+---
+{{- include "bjw-s.common.loader.init" . }}
+
+{{- define "website.hardcodedValues" -}}
+{{ if not .Values.global.nameOverride }}
+global:
+  nameOverride: "{{ .Release.Name }}"
+{{ end }}
+{{- end -}}
+{{- $_ := mergeOverwrite .Values (include "website.hardcodedValues" . | fromYaml) -}}
+
+{{ include "bjw-s.common.loader.generate" . }}
diff --git a/charts/website/values.yaml b/charts/website/values.yaml
new file mode 100644
index 0000000..20d0c44
--- /dev/null
+++ b/charts/website/values.yaml
@@ -0,0 +1,75 @@
+controllers:
+  main:
+    replicas: 1
+    strategy: RollingUpdate
+    containers:
+      main:
+        image:
+          repository: fillcode/website
+          tag: "{{ .Chart.AppVersion }}"
+          pullPolicy: IfNotPresent
+        ports:
+          - name: http
+            containerPort: 3000
+            protocol: TCP
+        probes:
+          startup:
+            enabled: true
+            type: HTTP
+            path: /
+            port: http
+          liveness:
+            enabled: true
+            type: HTTP
+            path: /
+            port: http
+          readiness:
+            enabled: true
+            type: HTTP
+            path: /
+            port: http
+        resources: {}
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+              - ALL
+          runAsNonRoot: true
+          runAsUser: 1000
+          runAsGroup: 1000
+
+defaultPodOptions:
+  annotations: {}
+  labels: {}
+  imagePullSecrets: []
+  nodeSelector: {}
+  tolerations: []
+  affinity: {}
+  securityContext:
+    seccompProfile:
+      type: RuntimeDefault
+
+service:
+  main:
+    controller: main
+    type: ClusterIP
+    ports:
+      http:
+        port: 3000
+
+ingress:
+  main:
+    enabled: false
+    className: nginx
+    hosts:
+      - host: fillcode.com
+        paths:
+          - path: /
+            pathType: Prefix
+            service:
+              identifier: main
+              port: http
+    tls:
+      - hosts:
+          - fillcode.com
+        secretName: fillcode-com-crt