diff --git a/charts/incubator/bytestash/.helmignore b/charts/incubator/bytestash/.helmignore
new file mode 100644
index 00000000000..feb7464da6f
--- /dev/null
+++ b/charts/incubator/bytestash/.helmignore
@@ -0,0 +1,32 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
+# OWNERS file for Kubernetes
+OWNERS
+# helm-docs templates
+*.gotmpl
+# docs folder
+/docs
+# icon
+icon.png
+icon.webp
+icon-small.webp
diff --git a/charts/incubator/bytestash/CHANGELOG.md b/charts/incubator/bytestash/CHANGELOG.md
new file mode 100644
index 00000000000..f3e8318aa10
--- /dev/null
+++ b/charts/incubator/bytestash/CHANGELOG.md
@@ -0,0 +1,4 @@
+---
+title: Changelog
+pagefind: false
+---
diff --git a/charts/incubator/bytestash/Chart.yaml b/charts/incubator/bytestash/Chart.yaml
new file mode 100644
index 00000000000..7cea0611800
--- /dev/null
+++ b/charts/incubator/bytestash/Chart.yaml
@@ -0,0 +1,37 @@
+annotations:
+  max_scale_version: 24.04.1
+  min_scale_version: 24.04.0
+  truecharts.org/category: Productivity
+  truecharts.org/max_helm_version: "3.15"
+  truecharts.org/min_helm_version: "3.11"
+  truecharts.org/train: incubator
+apiVersion: v2
+appVersion: 1.5.7
+dependencies:
+  - name: common
+    version: 25.4.10
+    repository: oci://tccr.io/truecharts
+    condition: ""
+    alias: ""
+    tags: []
+    import-values: []
+deprecated: false
+description: ByteStash is a self-hosted web application designed to store, organise, and manage your code snippets efficiently. With support for creating, editing, and filtering snippets, ByteStash helps you keep track of your code in one secure place.
+home: https://truecharts.org/charts/incubator/bytestash
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/bytestash.webp
+keywords:
+  - bytestash
+  - Productivity
+  - Tools-Utilities
+  - code
+kubeVersion: '>=1.24.0-0'
+maintainers:
+  - name: TrueCharts
+    email: info@truecharts.org
+    url: https://truecharts.org
+name: bytestash
+sources:
+  - https://github.com/jordan-dalby/ByteStash
+  - https://github.com/truecharts/charts/tree/master/charts/incubator/bytestash
+type: application
+version: 0.0.1
diff --git a/charts/incubator/bytestash/README.md b/charts/incubator/bytestash/README.md
new file mode 100644
index 00000000000..7ef0b890d73
--- /dev/null
+++ b/charts/incubator/bytestash/README.md
@@ -0,0 +1,3 @@
+---
+title: README
+---
\ No newline at end of file
diff --git a/charts/incubator/bytestash/docs/How-To-Guide.md b/charts/incubator/bytestash/docs/How-To-Guide.md
new file mode 100644
index 00000000000..581460ab155
--- /dev/null
+++ b/charts/incubator/bytestash/docs/How-To-Guide.md
@@ -0,0 +1,29 @@
+---
+title: How-To
+---
+
+This is a quick how-to or setup-guide to use Bytestash on Talos.
+
+## App Configuration
+
+### Required Environment Settings:
+The following must be specified and updated in your Helm Release file.
+- `JWT_SECRET`: Provide a unique secret for the JSON Web Token
+
+### Optional Environment Settings:
+The following may be left at the default setting, OR you may override in your Helm Release file dependent on your requirements.
+- `BASE_PATH`: write /bIytestash for a domain such as my.domain/bytestash, leave blank in every other case
+- `TOKEN_EXPIRY`: How long the token lasts Default is 24 hrs.
+- `ALLOW_NEW_ACCOUNTS`: Will the instance allow new new accounts to be created. The Default is to allow new account creation.
+- `DEBUG`: Enable to turn on logging, in most instances leave disabled
+- `DISABLE_ACCOUNTS`: Disable the use of any accounts, export snippets first if enabling on an existing instance, as it will be like starting with a fresh instance. Default is false.
+- `DISABLE_INTERNAL_ACCOUNTS`: Disable the use of internal accounts. Default is false.
+
+### OIDC Single Sign On
+Setting up the OIDC section will allow you to enable Single Sign On (SSO).
+- `OIDC_ENABLED`: Set this to true to enable SSO. The default is for SSO - OIDC to be disabled.
+- `OIDC_DISPLAY_NAME`: Enter the Display Name for users signing in with SSO, the default is set to Single Sign-on
+- `OIDC_ISSUER_URL`: Enter the OIDC issuer URL,  e.g. https://authentik.mydomain.com/application/o/bytestash/ for authentik
+- `OIDC_CLIENT_ID`:  Enter the OIDC client ID, the SSO app provider will provide this
+- `OIDC_CLIENT_SECRET`: Enter the OIDC client secret, the SSO app provider will provide this
+- `OIDC_SCOPES`: The OIDC scopes to request, e.g. "openid profile email groups"
diff --git a/charts/incubator/bytestash/icon.png b/charts/incubator/bytestash/icon.png
new file mode 100644
index 00000000000..aa44dff1464
Binary files /dev/null and b/charts/incubator/bytestash/icon.png differ
diff --git a/charts/incubator/bytestash/templates/NOTES.txt b/charts/incubator/bytestash/templates/NOTES.txt
new file mode 100644
index 00000000000..efcb74cb772
--- /dev/null
+++ b/charts/incubator/bytestash/templates/NOTES.txt
@@ -0,0 +1 @@
+{{- include "tc.v1.common.lib.chart.notes" $ -}}
diff --git a/charts/incubator/bytestash/templates/common.yaml b/charts/incubator/bytestash/templates/common.yaml
new file mode 100644
index 00000000000..b51394e00a4
--- /dev/null
+++ b/charts/incubator/bytestash/templates/common.yaml
@@ -0,0 +1 @@
+{{ include "tc.v1.common.loader.all" . }}
diff --git a/charts/incubator/bytestash/values.yaml b/charts/incubator/bytestash/values.yaml
new file mode 100644
index 00000000000..1d8f0e4a36c
--- /dev/null
+++ b/charts/incubator/bytestash/values.yaml
@@ -0,0 +1,36 @@
+image:
+  repository: ghcr.io/jordan-dalby/bytestash
+  tag: 1.5.7@sha256:fa58bbc2fc5864ea600b92bb9d95a443d49fc92c6a9c7143fc4c1df8f45c4505
+  pullPolicy: IfNotPresent
+service:
+  main:
+    ports:
+      main:
+        port: 5000
+        protocol: http
+persistence:
+  data:
+    enabled: true
+    mountPath: "/data/snippets"
+portal:
+  open:
+    enabled: true
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          env:
+            BASE_PATH: ""
+            JWT_SECRET: "bytestash JWT secret"
+            TOKEN_EXPIRY: "24h"
+            ALLOW_NEW_ACCOUNTS: "false"
+            DEBUG: "false"
+            DISABLE_ACCOUNTS: "false"
+            DISABLE_INTERNAL_ACCOUNTS: "false"
+            OIDC_ENABLED: "false"
+            OIDC_DISPLAY_NAME: ""
+            OIDC_ISSUER_URL: ""
+            OIDC_CLIENT_ID: ""
+            OIDC_CLIENT_SECRET: ""
+            OIDC_SCOPES: ""