diff --git a/modules/garage.nix b/modules/garage.nix
index 8859d9c..be45bfe 100644
--- a/modules/garage.nix
+++ b/modules/garage.nix
@@ -23,4 +23,15 @@
       };
     };
   };
+
+  services.nginx = {
+    enable = true;
+    virtualHosts."s3.infra.newtype.fr" = {
+      forceSSL = true;
+      enableACME = true;
+      locations."/".proxyPass = "http://[::1]:3900/";
+    };
+  };
+
+  networking.firewall.allowedTCPPorts = [ 80 443 ];
 }