diff --git a/docker-compose.yaml b/docker-compose.yaml
new file mode 100644
index 0000000..665d548
--- /dev/null
+++ b/docker-compose.yaml
@@ -0,0 +1,22 @@
+services:
+  oauth2-proxy:
+    image: quay.io/oauth2-proxy/oauth2-proxy:latest
+    container_name: oauth2-proxy
+    restart: unless-stopped
+    env_file:
+      - .env
+    expose:
+      - "4180"
+    networks:
+      - infra-traefik_traefik-net
+    labels:
+      - traefik.enable=true
+      - "traefik.http.routers.oauth2-proxy.rule=Host(`auth-proxy.ljh31.de`)"
+      - "traefik.http.routers.oauth2-proxy.entrypoints=websecure"
+      - "traefik.http.routers.oauth2-proxy.tls=true"
+      - "traefik.http.routers.oauth2-proxy.tls.certresolver=letsencrypt"
+      - "traefik.http.services.oauth2-proxy.loadbalancer.server.port=4180"
+
+networks:
+  infra-traefik_traefik-net:
+    external: true