diff --git a/compose.yml b/compose.yml
index a7bc959..1900214 100644
--- a/compose.yml
+++ b/compose.yml
@@ -37,6 +37,22 @@ services:
     volumes:
     - ./media:/media
     - ./custom-templates:/templates
+    labels:
+      traefik.enable: true
+      traefik.http.routers.authentik.rule: "Host(`authentik.urmel.de`)"
+      traefik.http.routers.authentik.tls: true
+      traefik.http.routers.authentik.tls.certresolver: hetzner
+      traefik.http.routers.authentik.priority: 10
+      traefik.http.routers.authentik.service: authentik
+      traefik.http.services.authentik.loadbalancer.server.port: 9000
+
+      # https://goneuland.de/authentik-in-kombination-mit-traefik/#2_Authentik_im_Stack_vorbereiten
+      traefik.http.routers.authentik-outpost.rule: "HostRegexp(`{subdomain:[a-z0-9-]+.}urmel.de`) && PathPrefix(`/outpost.goauthentik.io/`)"
+      traefik.http.routers.authentik-outpost.tls: true
+      traefik.http.routers.authentik-outpost.priority: 15
+      traefik.http.routers.authentik-outpost.service: authentik-outpost
+      traefik.http.services.authentik-outpost.loadbalancer.server.port: 9000
+
   worker:
     command: worker
     depends_on:
@@ -60,7 +76,7 @@ services:
 
 networks:
   proxy:
-    name: nginx-proxy_default
+    name: traefik_exposed
     external: true
   internal: