diff --git a/web/Caddyfile b/web/Caddyfile
new file mode 100644
index 0000000..b1e606d
--- /dev/null
+++ b/web/Caddyfile
@@ -0,0 +1,28 @@
+{
+    # Global options
+    auto_https off
+}
+
+:80 {
+    # Serve static frontend files
+    root * /srv
+    file_server
+
+    # Proxy API calls to backend Flask
+    handle_path /api/* {
+        reverse_proxy backend:8000
+    }
+
+    # Proxy OAuth routes
+    handle_path /login {
+        reverse_proxy backend:8000
+    }
+
+    handle_path /oauth/callback {
+        reverse_proxy backend:8000
+    }
+
+    handle_path /health {
+        reverse_proxy backend:8000
+    }
+}