diff --git a/compose.yml b/compose.yml
index f0408e1..1720c83 100644
--- a/compose.yml
+++ b/compose.yml
@@ -27,10 +27,14 @@ services:
       traefik.http.routers.traefik-secure.rule: Host(`traefik.arpa.urmel.de`)
       traefik.http.routers.traefik-secure.tls: "true"
       traefik.http.routers.traefik-secure.tls.certresolver: hetzner
+      traefik.http.routers.traefik-secure.service: api@internal
+      traefik.http.routers.traefik-secure.middlewares: traefik-auth@docker
+
+
       traefik.http.routers.traefik-secure.tls.domains[0].main: "arpa.urmel.de"
       traefik.http.routers.traefik-secure.tls.domains[0].sans: "*.arpa.urmel.de"
 
-      traefik.http.routers.traefik-secure.service: api@internal
+      traefik.http.middlewares.traefik-auth.basicauth.users: "${AUTH_STRING}"
 
 volumes:
   traefik-certs: