diff --git a/roles/georchestra/templates/mapstore/proxy.properties.j2 b/roles/georchestra/templates/mapstore/proxy.properties.j2
new file mode 100644
index 0000000..23f6432
--- /dev/null
+++ b/roles/georchestra/templates/mapstore/proxy.properties.j2
@@ -0,0 +1,41 @@
+# ##################
+# CONNECTION MANAGER
+# ##################
+timeout = 30000
+connection_timeout = 30000
+max_total_connections = 60
+default_max_connections_per_host = 6
+
+# #################
+# Stream Byte Size
+# #################
+defaultStreamByteSize=1024
+
+# ###########
+# WHITE LISTS
+# ###########
+# White lists, if defined, limit the requests that are accepted and handled by the proxy. Any request that is not
+# matching a defined whitelist will be rejected.
+
+# hostnameWhitelist defines the accepted target hosts for the internal proxy.
+# The list should be set to the hosts whose CORS headers do not allow direct access
+hostnameWhitelist = demo.geo-solutions.it
+
+# mimetype whitelist limit the accepted values for the contentype header in response from the proxied host
+mimetypeWhitelist = application/force-download,text/html,text/plain,application/xml,text/xml,application/vnd.ogc.sld+xml,application/vnd.ogc.gml,application/json,application/vnd.ogc.wms_xml,application/x-www-form-urlencoded,image/png,application/pdf,text/csv,application/zip,text/csv;charset=UTF-8
+
+# methods whitelist limit the accepted values for the HTTP method in requests
+methodsWhitelist = GET,POST,PUT
+
+# hosts whitelist is like hostname whitelist, but IP addresses are used instead of host names
+#hostsWhitelist = 127.0.0.1
+
+# reqtype whitelist allow a regular expression based filter on the request urls
+# it is possible to defined one or more whitelist, each with a specific filter
+# only urls matching one of the whitelist will be forwarded
+#reqtypeWhitelist.capabilities = (([&]?([Rr][Ee][Qq][Uu][Ee][Ss][Tt]=[Gg]et[Cc]apabilities))|([&]?(version=1\\.1\\.1)))+
+reqtypeWhitelist.capabilities = .*[Gg]et[Cc]apabilities.*
+reqtypeWhitelist.featureinfo = .*[Gg]et[Ff]eature[Ii]nfo.*
+reqtypeWhitelist.csw = .*csw.*
+reqtypeWhitelist.geostore = .*geostore.*
+reqtypeWhitelist.generic = (.*exist.*)|(.*pdf.*)|(.*map.*)|(.*wms.*)|(.*wmts.*)|(.*wfs.*)|(.*ows.*)