diff --git a/vars/main.yaml b/vars/main.yaml
index 098edf6..6ddb69e 100644
--- a/vars/main.yaml
+++ b/vars/main.yaml
@@ -3,3 +3,28 @@ _local_facts:
   database_password: "{% if not ansible_local.buildbot.database_password is defined %}{{ lookup('password', '/dev/null length=16 chars=ascii_letters') }}{% else %}{{ ansible_local.buildbot.database_password }}{% endif %}"
 
 buildbot_database_url: "postgresql://{{buildbot_db_user}}:{{buildbot_db_pass}}@localhost:5432/{{buildbot_db_name}}"
+
+buildbot_nginx_vhosts:
+  - name: buildbot
+    server_names:
+      - "{{ buildbot_server_name }}"
+    # from https://www.digitalocean.com/community/tutorials/how-to-configure-buildbot-with-ssl-using-an-nginx-reverse-proxy
+    custom: |-
+      location / {
+        include proxy_params;
+        proxy_pass http://localhost:8010;
+      }
+      # Server sent event (sse) settings
+      location /sse {
+        proxy_buffering off;
+        proxy_pass http://localhost:8010;
+      }
+
+      # Websocket settings
+      location /ws {
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+        proxy_pass http://localhost:8010;
+        proxy_read_timeout 6000s;
+      }