diff --git a/aries/anginx/README.md b/aries/anginx/README.md
new file mode 100644
index 0000000..97d4ae8
--- /dev/null
+++ b/aries/anginx/README.md
@@ -0,0 +1,11 @@
+# nginx reverse proxy
+One of the neat features of aries is that there is an HTTP/HTTPS reverse proxy that I use to securely expose some of my services to the internet.
+
+### HTTP -> HTTPS redirect
+HTTPS is forced
+
+### Let's Encrypt TLS Termination
+Since this nginx is exposed to the internet, I have setup a script that will generate a publicly trusted Let's Encrypt certificate for HTTPS sessions. On my LAN, my HTTPS services all use certificates generated from my internal certificate authority, so they would never be publicly trusted.
+
+### Domain names only
+No connections by IP only are allowed, everyone must have a hostname when conencting.
\ No newline at end of file