diff --git a/web_ca.yaml b/web_ca.yaml
new file mode 100644
index 0000000..a0ca0b1
--- /dev/null
+++ b/web_ca.yaml
@@ -0,0 +1,17 @@
+---
+- hosts: emmett
+  roles:
+    - role: lxc_guest
+      vm_name: ca
+      distro: sid
+    - role: ssh_server
+      ansible_connection: lxc_ssh
+      ansible_docker_extra_args: ca
+
+- hosts: ca
+  roles:
+    - role: dns_record
+    - role: reverse_proxy
+- hosts: status
+  roles:
+    - role: icinga2-monitoring