diff --git a/.gitea/workflows/lint.yml b/.gitea/workflows/lint.yml
index 6c0bf8b..2fb91e7 100644
--- a/.gitea/workflows/lint.yml
+++ b/.gitea/workflows/lint.yml
@@ -14,7 +14,7 @@ jobs:
     - name: Install Python
       uses: actions/setup-python@v4
       with:
-        python-version: '3.12'
+        python-version: '3.13'
         cache: 'pip' # caching pip dependencies
     - run: pip install ruff
     - run: |
diff --git a/Dockerfile b/Dockerfile
index 2e4fe83..2ff83a2 100755
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.12-slim
+FROM python:3.13-slim
 
 WORKDIR /opt/tisbackup
 
@@ -8,7 +8,7 @@ COPY . /opt/tisbackup
 RUN apt-get update \
    && apt-get install --no-install-recommends -y rsync ssh cron \
    && rm -rf /var/lib/apt/lists/* \
-   && /usr/local/bin/python3.12 -m pip install --no-cache-dir -r requirements.txt \
+   && /usr/local/bin/python3.13 -m pip install --no-cache-dir -r requirements.txt \
    && mkdir -p /var/spool/cron/crontabs \
    && echo '59 03 * * * root /bin/bash /opt/tisbackup/backup.sh' > /etc/crontab \
    && echo '' >> /etc/crontab \
@@ -17,4 +17,4 @@ RUN apt-get update \
 EXPOSE 8080
 
 ENTRYPOINT ["/entrypoint.sh"]
-CMD ["/usr/local/bin/python3.12","/opt/tisbackup/tisbackup_gui.py"]
+CMD ["/usr/local/bin/python3.13","/opt/tisbackup/tisbackup_gui.py"]
diff --git a/README.md b/README.md
index 77cba7f..febc664 100644
--- a/README.md
+++ b/README.md
@@ -108,6 +108,35 @@ Run!
 docker compose up -d
 ```
 
+## NGINX reverse-proxy
+
+Sample config file
+
+```nginx
+server {
+  listen 443 ssl http2;
+  # Remove '#' in the next line to enable IPv6
+  # listen [::]:443 ssl http2;
+  server_name tisbackup.poudlard.lan;
+
+  ssl_certificate /etc/letsencrypt/live/tisbackup.poudlard.lan/fullchain.pem; # managed by Certbot
+  ssl_certificate_key /etc/letsencrypt/live/tisbackup.poudlard.lan/privkey.pem; # managed by Certbot
+
+
+  location / {
+    proxy_set_header   X-Real-IP $remote_addr;
+    proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header   Host $host;
+    proxy_pass         http://localhost:9980/;
+    proxy_http_version 1.1;
+    proxy_set_header   Upgrade $http_upgrade;
+    proxy_set_header   Connection "upgrade";
+  }
+}
+```
+
+
+
 ## About
 
 [Tranquil IT](contact_at_tranquil_it) is the original author of TISBackup.
diff --git a/nginx/tisbackup.conf b/nginx/tisbackup.conf
new file mode 100644
index 0000000..b3711bc
--- /dev/null
+++ b/nginx/tisbackup.conf
@@ -0,0 +1,20 @@
+server {
+  listen 443 ssl http2;
+  # Remove '#' in the next line to enable IPv6
+  # listen [::]:443 ssl http2;
+  server_name tisbackup.poudlard.lan;
+
+  ssl_certificate /etc/letsencrypt/live/tisbackup.poudlard.lan/fullchain.pem; # managed by Certbot
+  ssl_certificate_key /etc/letsencrypt/live/tisbackup.poudlard.lan/privkey.pem; # managed by Certbot
+
+
+  location / {
+    proxy_set_header   X-Real-IP $remote_addr;
+    proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header   Host $host;
+    proxy_pass         http://localhost:9980/;
+    proxy_http_version 1.1;
+    proxy_set_header   Upgrade $http_upgrade;
+    proxy_set_header   Connection "upgrade";
+  }
+}