diff --git a/docker-compose.yaml b/docker-compose.yaml
index b52af30..7484ef4 100644
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -2,6 +2,8 @@ services:
 
   sqldb:
     image: mysql:8.3
+    networks:
+      - kimai
     volumes:
       - /srv/docker/kimai/mysql:/var/lib/mysql
     environment:
@@ -20,6 +22,19 @@ services:
 
   kimai:
     image: kimai/kimai2:stable
+    networks:
+      - traefik-public
+      - kimai
+    labels:
+      - "traefik.docker.network=traefik-public"
+      - "traefik.enable=true"
+      - "traefik.http.routers.kimai.rule=Host(`time.speerfam.net`)"
+      - "traefik.http.routers.kimai.entrypoints=websecure"
+      - "traefik.http.routers.kimai.tls.certresolver=myresolver"
+      
+      # Pulling the security rules dynamically from our file provider setup
+      - "traefik.http.routers.kimai.middlewares=geoblock-policy@file,crowdsec-policy@file,secure-headers@file"
+      - "traefik.http.services.kimai.loadbalancer.server.port=8001"
     depends_on:
       sqldb:
         condition: service_healthy
@@ -31,7 +46,7 @@ services:
       - 8002:8001
     environment:
       - APP_SECRET= MOpjyc5UWVYowgjWR7FhStVc5NCz2D7H
-      - TRUSTED_HOSTS=kimai.speerfam.net # set this to the domain name you use to access Kimai
+      - TRUSTED_HOSTS=time.speerfam.net # set this to the domain name you use to access Kimai
       - ADMINMAIL=mwspeer@gmail.com
       - ADMINPASS=Grumbling-Evacuate-Brethren5
       - "DATABASE_URL=mysql://kimaiuser:Tremor-Tarot-Badland2@sqldb/kimai?charset=utf8mb4&serverVersion=8.3.0"
@@ -40,4 +55,10 @@ services:
 volumes:
   data:
   mysql:
-  plugins:
\ No newline at end of file
+  plugins:
+
+networks:
+  traefik-public:
+    external: true
+  kimai:
+    external: false
\ No newline at end of file