diff --git a/infrastructure/storage/nfs-provisioner.yaml b/infrastructure/storage/nfs-provisioner.yaml
new file mode 100644
index 0000000..b10bdb3
--- /dev/null
+++ b/infrastructure/storage/nfs-provisioner.yaml
@@ -0,0 +1,37 @@
+# infrastructure/storage/nfs-provisioner.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: nfs-subdir-external-provisioner
+  namespace: kube-system
+spec:
+  selector:
+    matchLabels: {app: nfs-subdir-external-provisioner}
+  template:
+    metadata:
+      labels: {app: nfs-subdir-external-provisioner}
+    spec:
+      serviceAccountName: nfs-subdir-external-provisioner
+      containers:
+      - name: nfs-subdir-external-provisioner
+        image: registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.7.0
+        volumeMounts: [{name: nfs, mountPath: /persistentvolumes}]
+        env:
+        - {name: PROVISIONER_NAME, value: k8s-sigs.io/nfs-subdir}
+        - {name: NFS_SERVER, value: 192.168.2.64}     # <-- Proxmox-host IP
+        - {name: NFS_PATH, value: /zfs-pool/data/k3s-storage}
+      volumes:
+      - name: nfs
+        nfs: {server: 192.168.2.64, path: /zfs-pool/data/k3s-storage}
+---
+apiVersion: storage.k8s.io/v1
+kind: StorageClass
+metadata:
+  name: nfs-client
+  annotations:
+    storageclass.kubernetes.io/is-default-class: "true"
+provisioner: k8s-sigs.io/nfs-subdir
+parameters:
+  archiveOnDelete: "true"
+reclaimPolicy: Retain
+volumeBindingMode: Immediate
\ No newline at end of file