diff --git a/apps/gitea/kustomization.yaml b/apps/gitea/kustomization.yaml
index 3f26ba0..55f270e 100755
--- a/apps/gitea/kustomization.yaml
+++ b/apps/gitea/kustomization.yaml
@@ -10,6 +10,8 @@ resources:
 - restic-sa.yaml
 - restic-role.yaml
 - restic-role-binding.yaml
+- restic-pvc.yaml
+- restic-debug-pod.yaml
 - restic-cronjob.yaml
 
 
diff --git a/apps/gitea/restic-debug-pod.yaml b/apps/gitea/restic-debug-pod.yaml
new file mode 100644
index 0000000..9b68498
--- /dev/null
+++ b/apps/gitea/restic-debug-pod.yaml
@@ -0,0 +1,28 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: restic-debug-pod
+  namespace: gitea
+spec:
+  serviceAccountName: restic-sa
+  volumes:
+  - name: restic-backup-vol
+    persistentVolumeClaim:
+      claimName: restic-backup-vol
+  - name: gitea-data
+    persistentVolumeClaim:
+      claimName: gitea-shared-storage
+  containers:
+  - name: restic-debug
+    image: git.namesny.com/cluster/restic:latest
+    command: ["/bin/sh", "-c"]
+    args: ["sleep infinity"]
+    envFrom:
+    - secretRef:
+        name: restic-secret
+    volumeMounts:
+    - name: restic-backup-vol
+      mountPath: /backup
+    - name: gitea-data
+      mountPath: /gitea
+