diff --git a/host_vars/irc.adm.crans.org.yml b/host_vars/irc.adm.crans.org.yml
index 53d3a98a63a5a588ccdc109e84b1082b780f441b..39a43fd58640fe25cdecaa65219119cc6fcb40e4 100644
--- a/host_vars/irc.adm.crans.org.yml
+++ b/host_vars/irc.adm.crans.org.yml
@@ -2,3 +2,19 @@
 interfaces:
   adm: ens18
   srv: ens19
+
+loc_certbot:
+  domains: "irc.crans.org"
+
+loc_nginx:
+  service_name: "thelounge"
+  servers:
+    - server_name:
+        - "irc.crans.org"
+        - "irc"
+      ssl: true
+      locations:
+        - filter: "^~ /web/"
+          params:
+            - "proxy_pass http://localhost:9000/"
+            - "include \"/etc/nginx/snippets/options-proxypass.conf\""
diff --git a/plays/irc.yml b/plays/irc.yml
new file mode 100755
index 0000000000000000000000000000000000000000..bd4a5e99d50db0b25112a9f3b7cf697a8a3f2acb
--- /dev/null
+++ b/plays/irc.yml
@@ -0,0 +1,9 @@
+#!/usr/bin/env ansible-playbook
+---
+- hosts: irc
+  vars:
+    certbot: '{{ glob_certbot | default({}) | combine(loc_certbot | default({})) }}'
+    nginx: '{{ glob_nginx | default({}) | combine(loc_nginx | default({})) }}'
+  roles:
+    - certbot
+    - nginx