diff --git a/scripts/homelab/installer/ingress-nginx.sh b/scripts/homelab/installer/ingress-nginx.sh
index b3cc4eb..3270b98 100644
--- a/scripts/homelab/installer/ingress-nginx.sh
+++ b/scripts/homelab/installer/ingress-nginx.sh
@@ -24,10 +24,10 @@
 # 	-n ingress-nginx-private \
 # 	lighthouse-config \
 # 	--from-file ../../core/nebula/lighthouse.yaml
-kubectl create configmap \
-	-n ingress-nginx-private \
-	nodes-lighthouse-config \
-	--from-file installer/nodes-lighthouse.yaml
+# kubectl create configmap \
+# 	-n ingress-nginx-private \
+# 	nodes-lighthouse-config \
+# 	--from-file installer/nodes-lighthouse.yaml
 
 kubectl apply -f installer/nodes-infrastructure.yaml
 
diff --git a/scripts/homelab/installer/nodes-infrastructure.yaml b/scripts/homelab/installer/nodes-infrastructure.yaml
index d40eb87..f10392e 100644
--- a/scripts/homelab/installer/nodes-infrastructure.yaml
+++ b/scripts/homelab/installer/nodes-infrastructure.yaml
@@ -31,6 +31,17 @@
   ipCidr: "111.0.0.113/24"
   secretName: node-rpi113-cert
 ---
+apiVersion: lekva.me/v1
+kind: NebulaNode
+metadata:
+  name: rpi114
+  namespace: ingress-nginx-private
+spec:
+  caName: pcloud
+  caNamespace: ingress-nginx-private
+  ipCidr: "111.0.0.114/24"
+  secretName: node-rpi114-cert
+---
 apiVersion: apps/v1
 kind: DaemonSet
 metadata:
@@ -204,3 +215,61 @@
         operator: "Equal"
         value: "role"
         effect: "NoSchedule"
+---
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  name: lighthouse-rpi114
+  namespace: ingress-nginx-private
+spec:
+  selector:
+    matchLabels:
+      app: lighthouse-rpi114
+  template:
+    metadata:
+      labels:
+        app: lighthouse-rpi114
+    spec:
+      restartPolicy: Always
+      hostNetwork: true
+      volumes:
+      - name: cert
+        secret:
+          secretName: node-rpi114-cert
+      - name: config
+        configMap:
+          name: nodes-lighthouse-config
+      containers:
+      - name: lighthouse
+        image: giolekva/nebula:latest
+        imagePullPolicy: IfNotPresent
+        securityContext:
+          capabilities:
+            add: ["NET_ADMIN"]
+          privileged: true
+        ports:
+        - name: lighthouse
+          containerPort: 4242
+          protocol: UDP
+        command: ["nebula", "--config=/etc/nebula/config/nodes-lighthouse.yaml"]
+        volumeMounts:
+        - name: cert
+          mountPath: /etc/nebula/lighthouse
+          readOnly: true
+        - name: config
+          mountPath: /etc/nebula/config
+          readOnly: true
+      affinity:
+        nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+              - matchExpressions:
+                - key: kubernetes.io/hostname
+                  operator: In
+                  values:
+                  - rpi114
+      tolerations:
+      - key: "pcloud"
+        operator: "Equal"
+        value: "role"
+        effect: "NoSchedule"