diff --git a/apps/gitea/helmchart.yaml b/apps/gitea/helmchart.yaml
index 5c54c6c..f3aacc6 100644
--- a/apps/gitea/helmchart.yaml
+++ b/apps/gitea/helmchart.yaml
@@ -12,6 +12,8 @@ spec:
       enabled: false
     postgresql-ha:
       enabled: false
+    image:
+      tag: 1.21.11
     gitea:
       config:
         APP_NAME: Git.dev.cm
diff --git a/apps/gitea/ingress-http.yaml b/apps/gitea/ingress-http.yaml
index e4fa077..5c1c6a7 100644
--- a/apps/gitea/ingress-http.yaml
+++ b/apps/gitea/ingress-http.yaml
@@ -11,6 +11,37 @@ spec:
         paths:
           - pathType: Prefix
             path: "/"
+            backend:
+              service:
+                name: gitea-http
+                port:
+                  number: 3000
+
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: gitea-http-static
+  namespace: infra-devops
+  annotations:
+    nginx.ingress.kubernetes.io/use-regex: "true"
+    nginx.ingress.kubernetes.io/proxy-buffering: "on"
+    nginx.ingress.kubernetes.io/configuration-snippet: |
+      proxy_cache cache;
+      proxy_cache_valid 200 302 1d;
+      proxy_cache_valid 404 10m;
+      proxy_cache_valid any 1h;
+      proxy_cache_use_stale error timeout updating http_404 http_500 http_502 http_503 http_504;
+      proxy_cache_bypass $http_x_purge;
+      proxy_ignore_headers Cache-Control;
+      add_header X-Cache-Status $upstream_cache_status;
+spec:
+  ingressClassName: nginx
+  rules:
+    - host: git.dev.cm
+      http:
+        paths:
+          - path: /(assets|avatars)/.*
+            pathType: ImplementationSpecific
             backend:
               service:
                 name: gitea-http
diff --git a/core/nginx/helmchart.yaml b/core/nginx/helmchart.yaml
index 166442e..84c6c3e 100644
--- a/core/nginx/helmchart.yaml
+++ b/core/nginx/helmchart.yaml
@@ -42,4 +42,10 @@ spec:
       extraArgs:
         default-ssl-certificate: "kube-system/dev-cm-crt"
       config:
-        use-forwarded-headers: "true"
\ No newline at end of file
+        use-forwarded-headers: "true"
+        allow-snippet-annotations: "true"
+        http-snippet: |
+          proxy_cache_path /tmp/nginx-cache levels=1:2 keys_zone=cache:2m max_size=100m inactive=7d use_temp_path=off;
+          proxy_cache_key $scheme$proxy_host$request_uri;
+          proxy_cache_lock on;
+          proxy_cache_use_stale updating;
\ No newline at end of file