diff --git a/servers/legion/k8s/media/flaresolverr.yaml b/servers/legion/k8s/media/flaresolverr.yaml
new file mode 100644
index 0000000..9067029
--- /dev/null
+++ b/servers/legion/k8s/media/flaresolverr.yaml
@@ -0,0 +1,56 @@
+# FlareSolverr — headless browser proxy for bypassing Cloudflare protection on torrent indexers
+# Prowlarr uses this automatically for protected indexers (1337x, EZTV, etc.)
+# Configure in Prowlarr: Settings > Indexers > Add FlareSolverr proxy, URL=http://flaresolverr:8191
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: flaresolverr
+  namespace: media
+  labels:
+    app: flaresolverr
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: flaresolverr
+  template:
+    metadata:
+      labels:
+        app: flaresolverr
+    spec:
+      containers:
+        - name: flaresolverr
+          image: ghcr.io/flaresolverr/flaresolverr:latest
+          env:
+            - name: LOG_LEVEL
+              value: "info"
+            - name: TZ
+              value: "America/Chicago"
+          ports:
+            - containerPort: 8191
+          resources:
+            requests:
+              memory: 256Mi
+              cpu: 100m
+            limits:
+              memory: 1Gi
+              cpu: 500m
+          livenessProbe:
+            httpGet:
+              path: /health
+              port: 8191
+            initialDelaySeconds: 20
+            periodSeconds: 30
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: flaresolverr
+  namespace: media
+spec:
+  selector:
+    app: flaresolverr
+  ports:
+    - port: 8191
+      targetPort: 8191
+  type: ClusterIP