diff --git a/manifests/artemis/backstage/db-connector.yaml b/manifests/artemis/backstage/db-connector.yaml
new file mode 100644
index 0000000..090c8be
--- /dev/null
+++ b/manifests/artemis/backstage/db-connector.yaml
@@ -0,0 +1,29 @@
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: backstage
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    name: platform
+    kind: ClusterSecretStore
+  target:
+    name: backstage-db-connector
+  data:
+    - secretKey: POSTGRES_HOST
+      remoteRef:
+        key: backstage/connector
+        property: POSTGRES_HOST
+    - secretKey: POSTGRES_PORT
+      remoteRef:
+        key: backstage/connector
+        property: POSTGRES_PORT
+    - secretKey: POSTGRES_USER
+      remoteRef:
+        key: backstage/connector
+        property: POSTGRES_USER
+    - secretKey: POSTGRES_PASSWORD
+      remoteRef:
+        key: backstage/connector
+        property: POSTGRES_PASSWORD
diff --git a/manifests/artemis/backstage/deployment.yaml b/manifests/artemis/backstage/deployment.yaml
new file mode 100644
index 0000000..622b9a0
--- /dev/null
+++ b/manifests/artemis/backstage/deployment.yaml
@@ -0,0 +1,26 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: backstage
+  namespace: backstage
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: backstage
+  template:
+    metadata:
+      labels:
+        app: backstage
+    spec:
+      containers:
+        - name: backstage
+          image: git.dgse.cloud/dgse/backstage:latest
+          imagePullPolicy: IfNotPresent
+          ports:
+            - name: http
+              containerPort: 7007
+          envFrom:
+            - secretRef:
+                name: backstage-db-connector
diff --git a/manifests/artemis/backstage/kustomization.yaml b/manifests/artemis/backstage/kustomization.yaml
index da0779c..0ee8c01 100644
--- a/manifests/artemis/backstage/kustomization.yaml
+++ b/manifests/artemis/backstage/kustomization.yaml
@@ -5,5 +5,7 @@ metadata:
   name: backstage
 
 resources:
+  - db-connector.yaml
   - secret.yaml
   - db-cluster.yaml
+  - deployment.yaml