diff --git a/docker-compose.yml b/docker-compose.yml
index 125efaf..2e0edb6 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,5 +1,15 @@
-version: "3"
+version: "3.8"
+
 services:
+  postgres:
+    image: postgres:12-alpine
+    networks:
+      - web
+    environment:
+      - POSTGRES_PASSWORD
+    volumes:
+      - /opt/trackdb:/var/lib/postgresql/data
+
   previouslyonifm:
     environment:
       - ENVIRONMENT
@@ -8,14 +18,28 @@ services:
       - STATION_SECRET_2
       - STATION_SECRET_3
     build: .
+    depends_on:
+      - postgres
+    networks:
+      - web
     volumes:
       - ./code:/srv/lapis
-    ports:
-      - "8082:8080"
+    # ports:
+    #   - "8082:8080"
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.trackdb.rule=Host(`tracks.intergalactic.fm`)
+      - traefik.http.routers.trackdb.entrypoints=web
+      - traefik.http.routers.trackdb.middlewares=redirect-https-trackdb
+      - traefik.http.middlewares.redirect-https-trackdb.redirectscheme.scheme=https
 
-  postgres:
-    image: postgres:12-alpine
-    environment:
-      - POSTGRES_PASSWORD
-    volumes:
-      - /opt/trackdb:/var/lib/postgresql/data
+      - traefik.http.routers.trackdb_ssl.rule=Host(`tracks.intergalactic.fm`)
+      - traefik.http.routers.trackdb_ssl.entrypoints=websecure
+      - traefik.http.routers.trackdb_ssl.tls.certresolver=myresolver
+
+      - traefik.http.services.trackdb.loadbalancer.server.port=8080
+
+
+networks:
+  web:
+    external: true