diff --git a/bundles/stromzaehler/items.py b/bundles/stromzaehler/items.py
index 37a2e11..1c6923c 100644
--- a/bundles/stromzaehler/items.py
+++ b/bundles/stromzaehler/items.py
@@ -9,7 +9,7 @@ files = {
             'influxdb_domain': influxdb_metadata['hostname'],
             'influxdb_bucket': influxdb_metadata['bucket'],
             'influxdb_org': influxdb_metadata['org'],
-            'influxdb_token': influxdb_metadata['admin_token'],
+            'influxdb_token': influxdb_metadata['writeonly_token'],
         },
         'triggers': [
             'svc_systemd:stromzaehler:restart'
diff --git a/nodes/home.openhab3.py b/nodes/home.openhab3.py
index 82b1644..b7bac80 100644
--- a/nodes/home.openhab3.py
+++ b/nodes/home.openhab3.py
@@ -4,11 +4,13 @@
         'raspberry-pi',
         'debian-11',
         'monitored',
+        'webserver',
     ],
     'bundles': [
         'zfs',
         'openhab',
         'java',
+        'mirror',
     ],
     'metadata': {
         'FIXME_dont_touch_sshd': True,
@@ -21,6 +23,19 @@
                 'gateway4': '10.0.0.1',
             },
         },
+        'letsencrypt': {
+            'delegate_to_node': 'htz.mails',
+        },
+        'nginx': {
+            'vhosts': {
+                'openhab.ckn.li': {
+                    'content': 'nginx/proxy_pass.conf',
+                    'context': {
+                        'target': 'http://localhost:8080',
+                    },
+                },
+            },
+        },
         'java': {
             'version': 11,
         },
diff --git a/nodes/htz.mails.py b/nodes/htz.mails.py
index c2a0164..b14b07b 100644
--- a/nodes/htz.mails.py
+++ b/nodes/htz.mails.py
@@ -132,6 +132,7 @@
             'root': {
                 'authorized_users': {
                     'root@home.server',
+                    'root@home.openhab3',
                 },
                 'authorized_keys': {
                     'ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBHMKTJLw6Cb+MLt+9JFOkuo2QBpuA8EoTKOFpb3IFQHEq19YLMzOhcErWmzaRfiCnILhnwTQz0njS+n9Qu4aghk= root@mail.sublimity.de'