diff --git a/classes/cluster/virtual-mcp-ocata-ovs/stacklight/proxy.yml b/classes/cluster/virtual-mcp-ocata-ovs/stacklight/proxy.yml
new file mode 100644
index 0000000..10d7577
--- /dev/null
+++ b/classes/cluster/virtual-mcp-ocata-ovs/stacklight/proxy.yml
@@ -0,0 +1,16 @@
+classes:
+- system.nginx.server.single
+- system.nginx.server.proxy.grafana_web
+- system.nginx.server.proxy.kibana_web
+- system.nginx.server.proxy.nagios_web
+- system.salt.minion.cert.proxy
+- cluster.virtual-mcp-ocata-ovs
+parameters:
+  _param:
+    linux_system_codename: xenial
+    nginx_proxy_ssl:
+      enabled: true
+      authority: ${_param:salt_minion_ca_authority}
+      engine: salt
+      mode: secure
+    salt_minion_ca_host: cfg01.${_param:cluster_domain}