diff --git a/caddy/Caddyfile b/caddy/Caddyfile
new file mode 100644
index 0000000..f818c45
--- /dev/null
+++ b/caddy/Caddyfile
@@ -0,0 +1,11 @@
+bram.veenboer.xyz \
+*.bram.veenboer.xyz \
+{
+    reverse_proxy nginx
+    tls {
+      dns route53 {
+        access_key_id {$AWS_ACCESS_KEY_ID}
+        secret_access_key {$AWS_SECRET_ACCESS_KEY}
+      }
+    }
+}
diff --git a/caddy/Dockerfile b/caddy/Dockerfile
new file mode 100644
index 0000000..b230ad0
--- /dev/null
+++ b/caddy/Dockerfile
@@ -0,0 +1,8 @@
+FROM caddy:2.7-builder AS builder
+
+RUN xcaddy build \
+    --with github.com/caddy-dns/route53
+
+FROM caddy:2.7-alpine
+
+COPY --from=builder /usr/bin/caddy /usr/bin/caddy