diff --git a/iacore.conf b/iacore.conf
index 79124bd..d556488 100644
--- a/iacore.conf
+++ b/iacore.conf
@@ -14,3 +14,27 @@ server {
         try_files $uri $uri.html $uri/ =404;
     }
 }
+
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    server_name bean.1a-insec.net;
+
+    ssl_certificate /etc/letsencrypt/live/bean.1a-insec.net/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/bean.1a-insec.net/privkey.pem;
+
+    access_log off;
+
+    location / {
+        proxy_pass http://unix:/srv/http/bean-doze;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+
+        # Proxy WebSockets
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "Upgrade";
+    }
+}