diff --git a/docker-compose.yaml b/docker-compose.yaml
index 2b9e672..68e2b75 100644
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -10,6 +10,8 @@ services:
       - NET_RAW
     devices:
       - /dev/net/tun:/dev/net/tun
+    ports:
+      - "${DROP_AIRVPN_PORT}:${DROP_AIRVPN_PORT}"
     volumes:
       - ./gluetun:/gluetun
     environment:
@@ -42,6 +44,17 @@ services:
       - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
       - POSTGRES_USER=${POSTGRES_USER}
       - POSTGRES_DB=${POSTGRES_DB}
+  traefik:
+    image: traefik
+    command:
+      - --api.dashboard=true
+      - --providers.docker=true
+      - --providers.docker.exposedByDefault=false
+      - --entrypoints.web.address=:${DROP_AIRVPN_PORT}
+#      - --entrypoints.websecure.address=:443
+#      - --certificatesresolvers.myresolver.acme.tlschallenge=true
+#      - --certificatesresolvers.myresolver.acme.email=your-email@example.com
+#      - --certificatesresolvers.myresolver.acme.storage=/etc/traefik/acme.json
   drop:
     image: ghcr.io/drop-oss/drop:latest
     container_name: drop-drop-shielded
@@ -63,4 +76,9 @@ services:
     environment:
       - HOSTNAME=drop-drop-shielded
       - DATABASE_URL=postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@postgres-drop-shielded:5432/${POSTGRES_DB}
-      - EXTERNAL_URL=http://${DROP_DDNS}:${DROP_AIRVPN_PORT}
\ No newline at end of file
+      - EXTERNAL_URL=http://${DROP_DDNS}:${DROP_AIRVPN_PORT}
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.whoami.rule=Host('drop-oss.airdns.org')"
+      - "traefik.http.routers.whoami.entrypoints=web"
+    #  - "traefik.http.routers.whoami.tls.certresolver=myresolver"
\ No newline at end of file