diff --git a/bootstrap.sh b/bootstrap.sh
index 8f3f04f..98f077e 100755
--- a/bootstrap.sh
+++ b/bootstrap.sh
@@ -24,3 +24,11 @@ pillar_roots:
 
 log_file: file:///dev/log
 EOF
+
+cat >/etc/salt/grains <<EOF
+roles:
+  - webserver
+  - gnuviechadmin.database
+  - gnuviechadmin.queues
+  - gnuviechadmin.webinterface
+EOF
diff --git a/roots/base/nginx.conf b/roots/base/nginx.conf
new file mode 100644
index 0000000..7e6a853
--- /dev/null
+++ b/roots/base/nginx.conf
@@ -0,0 +1,56 @@
+user www-data;
+worker_processes 4;
+pid /run/nginx.pid;
+
+events {
+	worker_connections 768;
+	# multi_accept on;
+}
+
+http {
+
+	##
+	# Basic Settings
+	##
+
+	sendfile on;
+	tcp_nopush on;
+	tcp_nodelay on;
+	keepalive_timeout 65;
+	types_hash_max_size 2048;
+	# server_tokens off;
+
+	server_names_hash_bucket_size 64;
+	# server_name_in_redirect off;
+
+	include /etc/nginx/mime.types;
+	default_type application/octet-stream;
+
+	##
+	# SSL Settings
+	##
+
+	ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE
+	ssl_prefer_server_ciphers on;
+
+	##
+	# Logging Settings
+	##
+
+	access_log /var/log/nginx/access.log;
+	error_log /var/log/nginx/error.log;
+
+	##
+	# Gzip Settings
+	##
+
+	gzip on;
+	gzip_disable "msie6";
+
+	##
+	# Virtual Host Configs
+	##
+
+	include /etc/nginx/conf.d/*.conf;
+	include /etc/nginx/sites-enabled/*;
+}
diff --git a/roots/base/nginx.sls b/roots/base/nginx.sls
new file mode 100644
index 0000000..89f149a
--- /dev/null
+++ b/roots/base/nginx.sls
@@ -0,0 +1,21 @@
+nginx:
+  pkg:
+    - installed
+  service.running:
+    - enable: True
+    - require:
+      - pkg: nginx
+
+nginx-common:
+  pkg.installed
+
+/etc/nginx/nginx.conf:
+  file.managed:
+    - source: salt://base/nginx.conf
+    - user: root
+    - group: root
+    - mode: 0644
+    - require:
+      - pkg: nginx-common
+    - watch_in:
+      - service: nginx
diff --git a/roots/gnuviechadmin/database.sls b/roots/gnuviechadmin/database.sls
new file mode 100644
index 0000000..e69de29
diff --git a/roots/gnuviechadmin/init.sls b/roots/gnuviechadmin/init.sls
new file mode 100644
index 0000000..e69de29
diff --git a/roots/gnuviechadmin/queues.sls b/roots/gnuviechadmin/queues.sls
new file mode 100644
index 0000000..e69de29
diff --git a/roots/gnuviechadmin/webinterface.sls b/roots/gnuviechadmin/webinterface.sls
new file mode 100644
index 0000000..e69de29
diff --git a/roots/webserver/init.sls b/roots/webserver/init.sls
new file mode 100644
index 0000000..22fa765
--- /dev/null
+++ b/roots/webserver/init.sls
@@ -0,0 +1,2 @@
+include:
+  - base.nginx