diff --git a/docker-compose.yml b/docker-compose.yml
index e00ee2a..1607760 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -2,8 +2,6 @@ services:
   ytplayer:
     build: .
     restart: unless-stopped
-    ports:
-      - "${PORT:-3000}:3000"
     volumes:
       # libsql DB file persists across container rebuilds
       - ytplayer-data:/app/data
@@ -19,7 +17,22 @@ services:
       timeout: 5s
       retries: 3
       start_period: 15s
+    networks:
+      - dokploy-network
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.ytplayer-http.rule=Host(`worship.hesed.sbs`)"
+      - "traefik.http.routers.ytplayer-http.entrypoints=web"
+      - "traefik.http.routers.ytplayer-http.middlewares=redirect-to-https"
+      - "traefik.http.routers.ytplayer-https.rule=Host(`worship.hesed.sbs`)"
+      - "traefik.http.routers.ytplayer-https.entrypoints=websecure"
+      - "traefik.http.routers.ytplayer-https.tls.certresolver=letsencrypt"
+      - "traefik.http.services.ytplayer-svc.loadbalancer.server.port=3000"
 
 volumes:
   ytplayer-data:
     driver: local
+
+networks:
+  dokploy-network:
+    external: true