diff --git a/.gitmodules b/.gitmodules
index f16e037..b9c0ba5 100644
--- a/.gitmodules
+++ b/.gitmodules
@@ -132,3 +132,6 @@
 [submodule "collections/ansible_collections/grafana/grafana"]
 	path = collections/ansible_collections/grafana/grafana
 	url = https://github.com/grafana/grafana-ansible-collection
+[submodule "roles/unattended_upgrades"]
+	path = roles/unattended_upgrades
+	url = https://github.com/hifis-net/ansible-role-unattended-upgrades.git
diff --git a/roles/unattended_upgrades b/roles/unattended_upgrades
new file mode 160000
index 0000000..f7b8f6f
--- /dev/null
+++ b/roles/unattended_upgrades
@@ -0,0 +1 @@
+Subproject commit f7b8f6f3ffbd0d2f2eff104071fae388c0d592e9
diff --git a/templates/files/nginx/sites/node_exporter.web01.l3d.space_tls b/templates/files/nginx/sites/node_exporter.web01.l3d.space_tls
new file mode 100644
index 0000000..f3d6feb
--- /dev/null
+++ b/templates/files/nginx/sites/node_exporter.web01.l3d.space_tls
@@ -0,0 +1,17 @@
+server {
+  listen 443 ssl http2;
+  listen [::]:443 ssl http2;
+
+  server_name node_exporter.web01.l3d.space;
+
+  include snippets/tls_parameters_{{ site.name }}.snippet.conf;
+  include snippets/tls_certificate_{{ site.name }}.snippet.conf;
+  include snippets/logging_{{ site.name }}.snippet.conf;
+
+  root /srv/www/c3woc.de;
+
+  location / {
+    charset utf-8;
+    try_files $uri $uri/ =404;
+  }
+}