diff --git a/roles/openresty.rb b/roles/openresty.rb
new file mode 100644
index 0000000..0ccccbd
--- /dev/null
+++ b/roles/openresty.rb
@@ -0,0 +1,11 @@
+name "openresty"
+
+default_run_list = %w(
+  kosmos_openresty::default
+)
+
+env_run_lists(
+  '_default' => default_run_list,
+  'development' => default_run_list,
+  'production' => default_run_list
+)
diff --git a/roles/openresty_proxy.rb b/roles/openresty_proxy.rb
new file mode 100644
index 0000000..8e656ff
--- /dev/null
+++ b/roles/openresty_proxy.rb
@@ -0,0 +1,46 @@
+name "openresty_proxy"
+
+override_attributes(
+  'openresty' => {
+    'server_names_hash_bucket_size' => 128
+  },
+  'tor' => {
+    'HiddenServices' => {
+      'web' => {
+        'HiddenServicePorts' => ['80 127.0.0.1:80', '443 127.0.0.1:443']
+      }
+    }
+  }
+)
+
+development_run_list = %w(
+  kosmos_assets::nginx_site
+)
+default_run_list = %w(
+  tor-full
+  kosmos_assets::nginx_site
+  kosmos_discourse::nginx
+  kosmos_drone::nginx
+  kosmos_garage::default
+  kosmos_garage::firewall_rpc
+  kosmos_garage::nginx_web
+  kosmos_gitea::nginx
+  kosmos_rsk::nginx_testnet
+  kosmos_rsk::nginx_mainnet
+  kosmos_website::default
+  kosmos-akkounts::nginx
+  kosmos-akkounts::nginx_api
+  kosmos-bitcoin::nginx_lndhub
+  kosmos-ejabberd::nginx
+  kosmos-hubot::nginx_botka_irc-libera-chat
+  kosmos-hubot::nginx_hal8000_xmpp
+  kosmos-ipfs::nginx_public_gateway
+  kosmos-mastodon::nginx
+  remotestorage_discourse::nginx
+)
+
+env_run_lists(
+  '_default' => default_run_list,
+  'development' => development_run_list,
+  'production' => default_run_list
+)