diff --git a/host_vars/prometheus01.vm.freifunk-stuttgart.de/revproxy b/host_vars/prometheus01.vm.freifunk-stuttgart.de/revproxy
new file mode 100644
index 0000000000000000000000000000000000000000..3dfde3e859d5b5e6469f69dfeab56b61ecad8cf8
--- /dev/null
+++ b/host_vars/prometheus01.vm.freifunk-stuttgart.de/revproxy
@@ -0,0 +1,7 @@
+---
+letsencrypt_account_email: "hostmaster@freifunk-stuttgart.de"
+letsencrypt_acme_directory: "https://acme-v02.api.letsencrypt.org/directory"
+vhosts:
+  - domain: prometheus01.vm.freifunk-stuttgart.de
+    backend: "http://127.0.0.1:9090/"
+    type: proxy
diff --git a/host_vars/prometheus01.vm.freifunk-stuttgart.de/ssh b/host_vars/prometheus01.vm.freifunk-stuttgart.de/ssh
new file mode 100644
index 0000000000000000000000000000000000000000..a74af179b4a31e5d627d376c8a06a601ef4006a2
--- /dev/null
+++ b/host_vars/prometheus01.vm.freifunk-stuttgart.de/ssh
@@ -0,0 +1,2 @@
+---
+ssh_disable_password_login: yes
diff --git a/inventory/role_revproxy b/inventory/role_revproxy
index d7b6d8799f75f70292e4a2f20a2e3c95ac2fd20d..2a9d66b1d9b3901ed40e12d2c7ffeb9cf929d105 100644
--- a/inventory/role_revproxy
+++ b/inventory/role_revproxy
@@ -4,3 +4,4 @@ role_revproxy:
     revproxy-05.vm.freifunk-stuttgart.de:
     revproxy-03.vm.freifunk-stuttgart.de:
     revproxy-z10a.vm.freifunk-stuttgart.de:
+    prometheus01.vm.freifunk-stuttgart.de: