diff --git a/bundles/nginx/items.py b/bundles/nginx/items.py
new file mode 100644
index 0000000..944b3f7
--- /dev/null
+++ b/bundles/nginx/items.py
@@ -0,0 +1,3 @@
+pkg_apt = {
+    'nginx': {},
+}
diff --git a/bundles/nginx/metadata.py b/bundles/nginx/metadata.py
new file mode 100644
index 0000000..e58e24c
--- /dev/null
+++ b/bundles/nginx/metadata.py
@@ -0,0 +1,19 @@
+@metadata_processor
+def nginx_apt_repo(metadata):
+    return {
+        'apt': {
+            'repos': {
+                'nginx': {
+                    'key': '573BFD6B3D8FBC641079A6ABABF5BD827BD9BF62',
+                    'items': [
+                        'deb http://nginx.org/packages/debian buster nginx',
+                    ],
+                },
+            },
+            'unattended-upgrades': {
+                'origins': {
+                    'nginx.org',
+                },
+            },
+        },
+    }, DEFAULTS, DONE
diff --git a/data/apt/files/gpg-keys/573BFD6B3D8FBC641079A6ABABF5BD827BD9BF62 b/data/apt/files/gpg-keys/573BFD6B3D8FBC641079A6ABABF5BD827BD9BF62
new file mode 100644
index 0000000..d2258b8
--- /dev/null
+++ b/data/apt/files/gpg-keys/573BFD6B3D8FBC641079A6ABABF5BD827BD9BF62
@@ -0,0 +1,28 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+Version: GnuPG v2.0.22 (GNU/Linux)
+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+=EWWI
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/nodes/htz/ex42-1048908.py b/nodes/htz/ex42-1048908.py
index fb323d6..14e7012 100644
--- a/nodes/htz/ex42-1048908.py
+++ b/nodes/htz/ex42-1048908.py
@@ -1,6 +1,7 @@
 nodes['htz.ex42-1048908'] = {
     'hostname': '94.130.52.224',
     'bundles': [
+        'nginx',
         'riot-web',
         'vmhost',
     ],