diff --git a/stash.subdomain.conf b/stash.subdomain.conf
new file mode 100644
index 0000000..1a7eb6f
--- /dev/null
+++ b/stash.subdomain.conf
@@ -0,0 +1,36 @@
+#make sure that your dns has a cname set for stash
+
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+
+    server_name stash.*;
+
+    include /config/nginx/ssl.conf;
+
+    client_max_body_size 0;
+
+    # enable for ldap auth, fill in ldap details in ldap.conf
+    #include /config/nginx/ldap.conf;
+
+    location / {
+        # enable the next two lines for http auth
+        #auth_basic "Restricted";
+        #auth_basic_user_file /config/nginx/.htpasswd;
+
+        # enable the next two lines for ldap auth
+        #auth_request /auth;
+        #error_page 401 =200 /login;
+
+        include /config/nginx/proxy.conf;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+        resolver 127.0.0.11 valid=30s;
+        set $upstream_app stash;
+        set $upstream_port 9999;
+        set $upstream_proto http;
+        proxy_pass $upstream_proto://$upstream_app:$upstream_port;
+        proxy_set_header Host $http_host;
+        #proxy_read_timeout 60000s;  #this need to be adjected in proxy.conf and not here
+    }
+}