diff --git a/roles/victoria-metrics-nginx/defaults/main.yml b/roles/victoria-metrics-nginx/defaults/main.yml
new file mode 100644
index 0000000..4fe7e34
--- /dev/null
+++ b/roles/victoria-metrics-nginx/defaults/main.yml
@@ -0,0 +1 @@
+victoria_metrics_server_name: '{{ ansible_fqdn }}'
diff --git a/roles/victoria-metrics-nginx/meta/main.yml b/roles/victoria-metrics-nginx/meta/main.yml
new file mode 100644
index 0000000..1eec765
--- /dev/null
+++ b/roles/victoria-metrics-nginx/meta/main.yml
@@ -0,0 +1,3 @@
+dependencies:
+- role: nginx
+  tags: nginx
diff --git a/roles/victoria-metrics-nginx/tasks/main.yml b/roles/victoria-metrics-nginx/tasks/main.yml
new file mode 100644
index 0000000..0e9d6ac
--- /dev/null
+++ b/roles/victoria-metrics-nginx/tasks/main.yml
@@ -0,0 +1,9 @@
+- name: ensure nginx is configured to proxy for victoria metrics
+  template:
+    src: victoria-metrics.nginx.conf.j2
+    dest: /etc/nginx/conf.d/victoria-metrics.conf
+    mode: u=rw,go=r
+  notify:
+  - reload nginx
+  tags:
+  - nginx-config
diff --git a/roles/victoria-metrics-nginx/templates/victoria-metrics.nginx.conf.j2 b/roles/victoria-metrics-nginx/templates/victoria-metrics.nginx.conf.j2
new file mode 100644
index 0000000..c900131
--- /dev/null
+++ b/roles/victoria-metrics-nginx/templates/victoria-metrics.nginx.conf.j2
@@ -0,0 +1,10 @@
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name {{ victoria_metrics_server_name }};
+
+    location / {
+        proxy_pass http://[::1]:8428/;
+        client_max_body_size 100m;
+    }
+}