diff --git a/.gitea/workflows/apply-kubernetes.yml b/.gitea/workflows/apply-kubernetes.yml
index ffbf1ab..67b8234 100644
--- a/.gitea/workflows/apply-kubernetes.yml
+++ b/.gitea/workflows/apply-kubernetes.yml
@@ -10,14 +10,8 @@ jobs:
       - name: update home server containers
         env:
           KUBECONFIG: /home/gitea-runner/.kube/config
-          MY_GITHUB_TOKEN: ${{ secrets.MY_GITHUB_TOKEN }}
-          HOMEASSISTANT_TOKEN: ${{ secrets.HOMEASSISTANT_TOKEN }}
-          GRAFANA_PASSWORD: ${{ secrets.GRAFANA_PASSWORD }}
-          CLOUDFLARE_CONFIG: ${{ secrets.CLOUDFLARE_CONFIG }}
-          COPILOT_TOKEN: ${{ secrets.COPILOT_TOKEN }}
         working-directory: /home/gitea-runner/infrastructure
         run: |
-          # kubectl apply -f kubernetes/ingress
           kubectl apply -f kubernetes/proxy-ingress
 
           kubectl annotate ingressclass nginx \
diff --git a/.gitea/workflows/backup-zfs.yml b/.gitea/workflows/backup-zfs.yml
new file mode 100644
index 0000000..1f80528
--- /dev/null
+++ b/.gitea/workflows/backup-zfs.yml
@@ -0,0 +1,26 @@
+name: ZFS Backup
+on:
+  schedule:
+    - cron: 0 1 * * *
+  workflow_dispatch:
+jobs:
+  update-infrastructure:
+    runs-on: [self-hosted, home-server]
+    steps:
+      - name: run syncoid
+        run: |
+          zpool status
+          echo ""
+          zfs list
+          echo ""
+          syncoid \
+            --recursive \
+            --no-privilege-elevation \
+              data-ssd/data \
+              backup/data
+
+          syncoid \
+            --recursive \
+            --no-privilege-elevation \
+              data-ssd/media \
+              backup/media
\ No newline at end of file