diff --git a/hosts/dalinar/default.nix b/hosts/dalinar/default.nix
index 38e2fa8..50c77a8 100644
--- a/hosts/dalinar/default.nix
+++ b/hosts/dalinar/default.nix
@@ -40,9 +40,7 @@
     firewall = {
       enable = true;
       allowedUDPPorts = [ 53 ];
-      allowedTCPPorts = [
-        config.services.grafana.settings.server.http_port
-      ];
+      allowedTCPPorts = [ 80 443];
     };
     # head -c4 /dev/urandom | od -A none -t x4
     # Required for ZFS, see https://openzfs.github.io/openzfs-docs/Getting%20Started/NixOS/index.html
@@ -208,6 +206,17 @@
     };
   };
 
+  services.caddy = {
+    enable = true;
+    virtualHosts = {
+      "http://grafana.dalinar.home.johannes-rothe.de" = {
+        extraConfig = ''
+          reverse_proxy localhost:${builtins.toString config.services.grafana.settings.server.http_port}
+        '';
+      };
+    };
+  };
+
   # This option defines the first version of NixOS you have installed on this particular machine,
   # and is used to maintain compatibility with application data (e.g. databases) created on older NixOS versions.
   #