diff --git a/dev/bitwarden.yml b/dev/bitwarden.yml
index 7925204..c7cafe0 100644
--- a/dev/bitwarden.yml
+++ b/dev/bitwarden.yml
@@ -5,6 +5,7 @@
     - host_vars/bitwarden.yml
   roles:
     - base
+    - proxy
     - docker
     - traefik
     - bitwarden
diff --git a/dev/host_vars/bitwarden.yml b/dev/host_vars/bitwarden.yml
index c14f96b..761981b 100644
--- a/dev/host_vars/bitwarden.yml
+++ b/dev/host_vars/bitwarden.yml
@@ -13,6 +13,9 @@ traefik_domain: traefik.vm.krislamo.org
 traefik_auth: admin:$apr1$T1l.BCFz$Jyg8msXYEAUi3LLH39I9d1 # admin:admin
 #traefik_acme_email: realemail@example.com # Let's Encrypt settings
 #traefik_production: true
+traefik_ports:
+  - "8000:80"
+  - "4430:443"
 
 # bitwarden
 # Get Installation ID & Key at https://bitwarden.com/host/
diff --git a/roles/.gitignore b/roles/.gitignore
index 792c0f3..1b4105a 100644
--- a/roles/.gitignore
+++ b/roles/.gitignore
@@ -11,6 +11,7 @@
 !nextcloud*/
 !nginx*/
 !prometheus*/
+!proxy/*
 !rsnapshot*/
 !traefik*/
 !unifi*/
diff --git a/roles/proxy/handlers/main.yml b/roles/proxy/handlers/main.yml
new file mode 100644
index 0000000..00e75ca
--- /dev/null
+++ b/roles/proxy/handlers/main.yml
@@ -0,0 +1,5 @@
+- name: Reload nginx
+  service:
+    name: nginx
+    state: reloaded
+  listen: reload_nginx
diff --git a/roles/proxy/tasks/main.yml b/roles/proxy/tasks/main.yml
new file mode 100644
index 0000000..cedbdb0
--- /dev/null
+++ b/roles/proxy/tasks/main.yml
@@ -0,0 +1,12 @@
+- name: Install nginx
+  apt:
+    name: nginx
+    state: present
+    update_cache: true
+
+- name: Install nginx configuration
+  template:
+    src: nginx.conf.j2
+    dest: /etc/nginx/nginx.conf
+    mode: '0644'
+  notify: reload_nginx