diff --git a/charts/vpn-mesh-config/lighthouse.yaml b/charts/vpn-mesh-config/lighthouse.yaml
index d2891e6..cf106b5 100644
--- a/charts/vpn-mesh-config/lighthouse.yaml
+++ b/charts/vpn-mesh-config/lighthouse.yaml
@@ -77,7 +77,7 @@
 listen:
   # To listen on both any ipv4 and ipv6 use "[::]"
   host: "[::]"
-  port: 4243
+  port: <PORT>
   # Sets the max number of packets to pull from the kernel for each syscall (under systems that support recvmmsg)
   # default is 64, does not support reload
   #batch: 64
diff --git a/charts/vpn-mesh-config/templates/lighthouse-service.yaml b/charts/vpn-mesh-config/templates/lighthouse-service.yaml
new file mode 100644
index 0000000..267d0f5
--- /dev/null
+++ b/charts/vpn-mesh-config/templates/lighthouse-service.yaml
@@ -0,0 +1,16 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: lighthouse
+  namespace: {{ .Release.Namespace }}
+spec:
+  type: LoadBalancer
+  selector:
+    app.kubernetes.io/name: ingress-nginx
+    app.kubernetes.io/instance: ingress-private
+    app.kubernetes.io/component: controller
+  ports:
+  - name: lighthouse
+    port: {{ .Values.lighthouse.port }}
+    targetPort: nebula
+    protocol: UDP