diff --git a/modules/kubernetes/main.tf b/modules/kubernetes/main.tf
index 01f80774..5ab7ddfa 100644
--- a/modules/kubernetes/main.tf
+++ b/modules/kubernetes/main.tf
@@ -157,6 +157,10 @@ module "privatebin" {
 #   tls_secret_name = var.tls_secret_name
 # }
 
+module "reloader" {
+  source = "./reloader"
+}
+
 module "webhook_handler" {
   source          = "./webhook_handler"
   tls_secret_name = var.tls_secret_name
diff --git a/modules/kubernetes/reloader/main.tf b/modules/kubernetes/reloader/main.tf
new file mode 100644
index 00000000..59971834
--- /dev/null
+++ b/modules/kubernetes/reloader/main.tf
@@ -0,0 +1,8 @@
+resource "helm_release" "reloader" {
+  namespace        = "reloader"
+  create_namespace = true
+  name             = "reloader"
+
+  repository = "https://stakater.github.io/stakater-charts"
+  chart      = "reloader"
+}
diff --git a/modules/kubernetes/wireguard/main.tf b/modules/kubernetes/wireguard/main.tf
index cced1f0f..d3e14cdb 100644
--- a/modules/kubernetes/wireguard/main.tf
+++ b/modules/kubernetes/wireguard/main.tf
@@ -22,6 +22,9 @@ resource "kubernetes_config_map" "wg_0_conf" {
     labels = {
       app = "wireguard"
     }
+    annotations = {
+      "reloader.stakater.com/match" = "true"
+    }
   }
 
   data = {
@@ -34,6 +37,10 @@ resource "kubernetes_secret" "wg_0_key" {
   metadata {
     name      = "wg0-key"
     namespace = "wireguard"
+
+    annotations = {
+      "reloader.stakater.com/match" = "true"
+    }
   }
   data = {
     "wg0.key" = var.wg_0_key
@@ -49,6 +56,9 @@ resource "kubernetes_deployment" "wireguard" {
     labels = {
       app = "wireguard"
     }
+    annotations = {
+      "reloader.stakater.com/search" = "true"
+    }
   }
   spec {
     replicas = 1
diff --git a/terraform.tfstate b/terraform.tfstate
index 69d9827d..15c12676 100644
Binary files a/terraform.tfstate and b/terraform.tfstate differ