diff --git a/README.md b/README.md
index a8e53a4bce494124f9ec031d9b6af0b936f37a50..8c4181fabb997357e5452c3c095905ce1a4cba65 100644
--- a/README.md
+++ b/README.md
@@ -28,6 +28,7 @@ This role makes use of a few variables which are set in case the target server i
   * cloud_collabora and cloud_collabora_url
   * cloud_onlyoffice and cloud_onlyoffice_url
 * docker_odoo
+  * extra_app
   * metabase
 
 Note : all variables defined in defualts_main.yml might be useful in another role, in that case, it would be better to have them overwritten at play or host_vars level in order to make sure the same value is provided to each independant role
diff --git a/templates/inverseproxy.yaml.j2 b/templates/inverseproxy.yaml.j2
index a19ee742550baa39b5636581eedd36a2916b8d67..81c62484ab31dc613336bc30d9a8882728d99548 100644
--- a/templates/inverseproxy.yaml.j2
+++ b/templates/inverseproxy.yaml.j2
@@ -6,6 +6,9 @@ services:
         environment:
             TZ: "{{ timezone }}"
         networks:
+{% if odoo_prod.extra_app is defined or odoo_nonprod_instances[0].extra_app is defined %}
+            app:
+{% endif %}
             shared:
 {% if inventory_hostname in groups['docker_auth'] | union(groups['docker_nagios']) or cloud_collabora or cloud_onlyoffice %}
               aliases:
@@ -63,6 +66,12 @@ services:
         restart: unless-stopped
 
 networks:
+{% if odoo_prod.extra_app is defined or odoo_nonprod_instances[0].extra_app is defined %}
+    app:
+        internal: true
+        driver_opts:
+            encrypted: 1
+{% endif %}
     shared:
 {% if restrict_internet_access %}
         internal: true