diff --git a/go/svc/speedtest/BUILD b/go/svc/speedtest/BUILD
index d51290f..3425af9 100644
--- a/go/svc/speedtest/BUILD
+++ b/go/svc/speedtest/BUILD
@@ -1,3 +1,4 @@
+load("@io_bazel_rules_docker//container:container.bzl", "container_image")
 load("@io_bazel_rules_go//go:def.bzl", "go_library")
 load("@io_bazel_rules_go//extras:embed_data.bzl", "go_embed_data")
 
@@ -15,3 +16,27 @@
     visibility = ["//visibility:public"],
 )
 
+container_image(
+    name="latest",
+    base="@prodimage-bionic//image",
+    files = ["//go/svc/speedtest/backend:backend"],
+    directory = "/hscloud",
+    entrypoint = ["/hscloud/backend"],
+)
+
+genrule(
+    name = "push_latest",
+    srcs = [":latest"],
+    outs = ["version.sh"],
+    executable = True,
+    cmd = """
+        local=bazel/go/svc/speedtest:latest
+        tag=$$(date +%s)
+        remote=registry.k0.hswaw.net/go/svc/speedtest:$$tag
+
+        docker tag $$local $$remote
+        docker push $$remote
+        echo -ne "#!/bin/sh\necho Pushed $$remote\n" > $(OUTS)
+    """,
+)
+
diff --git a/go/svc/speedtest/backend/backend b/go/svc/speedtest/backend/backend
deleted file mode 100755
index 8027d35..0000000
--- a/go/svc/speedtest/backend/backend
+++ /dev/null
Binary files differ
diff --git a/go/svc/speedtest/kube/prod.jsonnet b/go/svc/speedtest/kube/prod.jsonnet
new file mode 100644
index 0000000..e53fd45
--- /dev/null
+++ b/go/svc/speedtest/kube/prod.jsonnet
@@ -0,0 +1,86 @@
+local kube = import '../../../../kube/kube.libsonnet';
+
+{
+    local speedtest = self,
+    local cfg = speedtest.cfg,
+    cfg:: {
+        namespace: "speedtest",
+        appName: "speedtest",
+        domain: "speedtest.hackerspace.pl",
+
+        tag: "1563032542",
+        image: "registry.k0.hswaw.net/go/svc/speedtest:" + cfg.tag,
+
+        resources: {
+            requests: {
+                cpu: "25m",
+                memory: "50Mi",
+            },
+            limits: {
+                cpu: "100m",
+                memory: "200Mi",
+            },
+        },
+    },
+
+    namespace: kube.Namespace(cfg.namespace),
+
+    metadata(component):: {
+        namespace: cfg.namespace,
+        labels: {
+            "app.kubernetes.io/name": cfg.appName,
+            "app.kubernetes.io/managed-by": "kubecfg",
+            "app.kubernetes.io/component": component,
+        },
+    },
+
+    deployment: kube.Deployment("backend") {
+        metadata+: speedtest.metadata("backend"),
+        spec+: {
+            replicas: 1,
+            template+: {
+                 spec+: {
+                     containers_: {
+                         nginx: kube.Container("backend") {
+                             image: cfg.image,
+                             ports_: {
+                                 http: { containerPort: 8080 },
+                             },
+                             resources: cfg.resources,
+                         },
+                     },
+                 },
+            },
+        },
+    },
+
+    svc: kube.Service("public") {
+        metadata+: speedtest.metadata("public"),
+        target_pod:: speedtest.deployment.spec.template,
+    },
+
+    ingress: kube.Ingress("public") {
+        metadata+: speedtest.metadata("public") {
+            annotations+: {
+                "kubernetes.io/tls-acme": "true",
+                "certmanager.k8s.io/cluster-issuer": "letsencrypt-prod",
+                "nginx.ingress.kubernetes.io/proxy-body-size": "0",
+            },
+        },
+        spec+: {
+            tls: [
+                { hosts: [cfg.domain], secretName: "public-tls"}
+            ],
+            rules: [
+                {
+                    host: cfg.domain,
+                    http: {
+                        paths: [
+                            { path: "/", backend: speedtest.svc.name_port },
+                        ],
+                    },
+                },
+            ],
+        },
+    },
+}