diff --git a/ansible/post-deploy.yml b/ansible/post-deploy.yml
new file mode 100644
index 0000000..e9b129c
--- /dev/null
+++ b/ansible/post-deploy.yml
@@ -0,0 +1,40 @@
+---
+- hosts: all
+  gather_facts: false
+  tasks:
+    - name: Load variables
+      include_vars:
+        dir: "{{ dokku_lib_root }}/data/ansible/drone/vars/"
+        extensions:
+          - yml
+
+    - name: Set HTTP 80 port proxy
+      dokku_ports:
+        app: drone
+        mappings:
+          - "http:80:80"
+        state: present
+
+    - name: Setup LE certificates
+      shell: dokku letsencrypt drone
+      args:
+        creates: /home/dokku/drone/letsencrypt/certs
+
+    - name: Setup LE certificates renew cron job
+      shell: dokku letsencrypt:cron-job --add
+      args:
+        creates: /home/dokku/drone/letsencrypt/cron-job
+
+    - name: Remove automatically configured ports
+      dokku_ports:
+        app: drone
+        mappings:
+          - "http:80:80"
+        state: absent
+
+    - name: Set HTTP 443 port
+      dokku_ports:
+        app: drone
+        mappings:
+          - "https:443:80"
+        state: present