diff --git a/vaultwarden/.env.example b/vaultwarden/.env.example
new file mode 100644
index 0000000..24bc58e
--- /dev/null
+++ b/vaultwarden/.env.example
@@ -0,0 +1 @@
+ADMIN_TOKEN=''
diff --git a/vaultwarden/docker-compose.yml b/vaultwarden/docker-compose.yml
index 7d7547e..6c73fad 100644
--- a/vaultwarden/docker-compose.yml
+++ b/vaultwarden/docker-compose.yml
@@ -5,11 +5,11 @@ services:
     image: vaultwarden/server:latest
     container_name: vaultwarden
     restart: always
+    env_file:
+      - ./.env
     environment:
       WEBSOCKET_ENABLED: "true"  # Enable WebSocket notifications.
       SIGNUPS_ALLOWED: "false"
-      # TODO create an admin token
-      ADMIN_TOKEN: "abc"
     volumes:
       - ./vw-data:/data
     ports:
diff --git a/vaultwarden/vault.example.com b/vaultwarden/vault.example.com
new file mode 100644
index 0000000..e519190
--- /dev/null
+++ b/vaultwarden/vault.example.com
@@ -0,0 +1,30 @@
+server {
+
+	server_name vault.example.com;
+	listen [::]:80;
+	listen 80;
+	
+	location / {
+
+		proxy_pass "http://127.0.0.1:50002/";
+		proxy_set_header Host $http_host;
+		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+		proxy_set_header X-Scheme $scheme;
+		proxy_set_header X-Forwarded-Proto $scheme;
+
+	} 
+	location /notifications/hub {
+  		proxy_pass http://127.0.0.1:50003;
+		proxy_set_header Upgrade $http_upgrade;
+	        proxy_set_header Connection "upgrade";
+  	}
+	location /notifications/hub/negotiate {
+  		proxy_pass http://127.0.0.1:50002;
+  	}
+
+
+
+
+    client_max_body_size 128M;	# allow larger uploads
+
+}