diff --git a/caddy/Caddyfile b/caddy/Caddyfile
new file mode 100644
index 0000000..4dd41fb
--- /dev/null
+++ b/caddy/Caddyfile
@@ -0,0 +1,25 @@
+<DOMAIN> {
+    handle_path /api/* {
+        rewrite /api/* /{http.request.uri.path.4}
+        reverse_proxy webservice-inp21b:8080
+    }
+
+    handle / {
+        reverse_proxy frontend:5173
+    }
+
+    tls internal
+}
+
+http://<DOMAIN> {
+    handle_path /api/* {
+        rewrite /api/* /{http.request.uri.path.4}
+        reverse_proxy webservice-inp21b:8080
+    }
+
+    handle / {
+        reverse_proxy frontend:5173
+    }
+}
+
+
diff --git a/docker-compose.yml b/docker-compose.yml
index c88ee6b..22cf9b3 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -21,6 +21,7 @@ services:
       - 8080:8080
     environment:
       - DB_CONNECTION_STRING=postgresql://bbzw-horizon:<PW>@db/bbzw-horizon
+      - CRYPTO_SUBSTITION_KEY=""
 
   frontend:
     build:
@@ -42,3 +43,11 @@ services:
     restart: unless-stopped
     user: 0:0
 
+  caddy:
+    image: caddy:2.10
+    ports:
+      - "80:80"
+      - "443:443"
+    volumes:
+      - ./caddy/Caddyfile:/etc/caddy/Caddyfile
+    restart: unless-stopped