diff --git a/.gitmodules b/.gitmodules
index cd6f147..4a115d2 100644
--- a/.gitmodules
+++ b/.gitmodules
@@ -13,3 +13,6 @@
 [submodule "roles/etherpad"]
 	path = roles/etherpad
 	url = git@gitlab.federez.net:erdnaxe/ansible-role-etherpad.git
+[submodule "roles/nginx-reverse-proxy"]
+	path = roles/nginx-reverse-proxy
+	url = git@gitlab.federez.net:erdnaxe/ansible-role-nginx-reverse-proxy.git
diff --git a/group_vars/all/vars.yml b/group_vars/all/vars.yml
index dd7e5d6..3dcd606 100644
--- a/group_vars/all/vars.yml
+++ b/group_vars/all/vars.yml
@@ -21,3 +21,13 @@ ssh_pub_keys: "{{ vault_ssh_pub_keys }}"
 # Monitoring
 monitoring_mail: 'monitoring.aurore@lists.crans.org'
 
+# Nginx Proxy
+reversed_proxy_subdomains:
+  - re2o: 10.128.0.10
+  - intranet: 10.128.0.10
+  - pad: 10.128.0.52
+  - phabricator: 10.128.0.50
+  - wiki: 10.128.0.51
+  - www: 10.128.0.52
+  - re2o-test: 10.128.0.100
+
diff --git a/nginx-reverse-proxy.yml b/nginx-reverse-proxy.yml
new file mode 100644
index 0000000..6e36685
--- /dev/null
+++ b/nginx-reverse-proxy.yml
@@ -0,0 +1,6 @@
+---
+# Install NGINX with reverse proxy conf
+- hosts: proxy.adm.auro.re
+  roles:
+   - nginx-reverse-proxy
+
diff --git a/roles/nginx-reverse-proxy b/roles/nginx-reverse-proxy
new file mode 160000
index 0000000..88b16a7
--- /dev/null
+++ b/roles/nginx-reverse-proxy
@@ -0,0 +1 @@
+Subproject commit 88b16a7887572446de8b6362f3bb9a86094aa1d3