diff --git a/urubamba/playbook-setup.yml b/urubamba/playbook-setup.yml
index 1a2d8b1..ef7b2c5 100644
--- a/urubamba/playbook-setup.yml
+++ b/urubamba/playbook-setup.yml
@@ -9,3 +9,4 @@
     - htop
     - tmux
     - fail2ban
+    - nginx
diff --git a/urubamba/roles/nginx/meta/main.yml b/urubamba/roles/nginx/meta/main.yml
new file mode 100644
index 0000000..67b993e
--- /dev/null
+++ b/urubamba/roles/nginx/meta/main.yml
@@ -0,0 +1,3 @@
+---
+dependencies:
+  - role: ufw
diff --git a/urubamba/roles/nginx/tasks/main.yml b/urubamba/roles/nginx/tasks/main.yml
new file mode 100644
index 0000000..431f089
--- /dev/null
+++ b/urubamba/roles/nginx/tasks/main.yml
@@ -0,0 +1,9 @@
+---
+- name: Install nginx
+  ansible.builtin.package:
+    name: nginx
+    state: present
+- name: Allow nginx (HTTP, HTTPS) in ufw
+  community.general.ufw:
+    rule: allow
+    name: Nginx Full