diff --git a/docker-compose.yml b/docker-compose.yml
index 53b42f0..9f7a824 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,18 +1,28 @@
 services:
   toollist:
-    build:
-      context: .
-      dockerfile: Dockerfile
-    ports:
-      - "3000:3000"
+    image: git.revwal.de/oliver/toollist:latest
     volumes:
       # Persist the TOML data file across container restarts/upgrades.
       # On first run the seed data baked into the image is used;
       # subsequent writes go straight to this named volume.
-      - toollist-data:/app/data
+      - ./data:/app/data
     environment:
       LEPTOS_ENV: PROD
+      LEPTOS_SITE_ADDR: "0.0.0.0:3000"
     restart: unless-stopped
+    networks:
+      - web
+    labels:
+      - "traefik.enable=true"
+      - "traefik.docker.network=web"
+      - "traefik.http.routers.toollist.rule=Host(`toollist.revwal.de`)"
+      - "traefik.http.routers.toollist.entrypoints=websecure"
+      - "traefik.http.routers.toollist.tls=true"
+      - "traefik.http.routers.toollist.tls.certresolver=myresolver"
+      - "traefik.http.routers.toollist.middlewares=toollist-auth"
+      - "traefik.http.middlewares.toollist-auth.basicauth.users=user:$$2y$$12$$somehashedpasswordhere"
+      - "traefik.http.services.toollist.loadbalancer.server.port=3000"
 
-volumes:
-  toollist-data:
+networks:
+  web:
+    external: true