diff --git a/ansible/plays/machine_setup/caddy.yml b/ansible/plays/machine_setup/caddy.yml
new file mode 100644
index 0000000..9eac2d4
--- /dev/null
+++ b/ansible/plays/machine_setup/caddy.yml
@@ -0,0 +1,39 @@
+---
+- name: Set up caddy LXC
+  hosts: caddy
+  become: yes
+  tasks:
+    - name: default_packages
+      ansible.builtin.include_tasks: ../../templates/default_packages.yml
+
+    - name: create_user
+      ansible.builtin.include_tasks: ../../templates/create_user.yml
+      vars:
+        username: nick
+        github_user: Chewbaccalakis
+
+    - name: install caddy
+      block:
+        - name: install xcaddy prerequisites
+          ansible.builtin.apt:
+            name:
+              - debian-keyring
+              - debian-archive-keyring
+              - apt-transport-https
+            state: present
+
+        - name: download xcaddy gpg key
+          ansible.builtin.shell:
+            cmd: curl -1sLf 'https://dl.cloudsmith.io/public/caddy/xcaddy/gpg.key' | gpg --dearmor -o /usr/share/keyrings/caddy-xcaddy-archive-keyring.gpg
+            creates: /usr/share/keyrings/caddy-xcaddy-archive-keyring.gpg
+
+        - name: add xcaddy apt repository
+          ansible.builtin.shell:
+            cmd: curl -1sLf 'https://dl.cloudsmith.io/public/caddy/xcaddy/debian.deb.txt' | tee /etc/apt/sources.list.d/caddy-xcaddy.list
+            creates: /etc/apt/sources.list.d/caddy-xcaddy.list
+
+        - name: install xcaddy
+          ansible.builtin.apt:
+            name: xcaddy
+            state: present
+            update_cache: yes
\ No newline at end of file
diff --git a/terraform.tfvars b/terraform.tfvars
index e481134..8c5a773 100644
--- a/terraform.tfvars
+++ b/terraform.tfvars
@@ -47,6 +47,22 @@ dns_records = [
 nodes = {
   proxmox = {
     lxc = {
+      "caddy" = {
+        hostname     = "caddy"
+        vmid         = 101
+        template     = "local:vztmpl/debian-13-standard_13.1-2_amd64.tar.zst"
+        unprivileged = true
+        onboot       = true
+        tags         = ""
+        memory       = 1024
+        swap         = 0
+        disk_size    = "8G"
+        nic_name     = "eth0"
+        bridge       = "vmbr0"
+        ip           = "192.168.0.5/24"
+        nameserver   = "192.168.0.2"
+        gw           = "192.168.0.1"
+      }
       "dev" = {
         hostname     = "dev"
         vmid         = 800