diff --git a/ops/backrest/docker-compose.yml b/ops/backrest/docker-compose.yml
new file mode 100644
index 0000000..b4ce18b
--- /dev/null
+++ b/ops/backrest/docker-compose.yml
@@ -0,0 +1,40 @@
+services:
+  backrest:
+    image: ghcr.io/garethgeorge/backrest:latest
+    container_name: backrest
+    restart: unless-stopped
+    environment:
+      - TZ=Europe/Berlin
+      - BACKREST_DATA=/data
+      - BACKREST_CONFIG=/config/config.json
+      - XDG_CACHE_HOME=/cache
+      - TMPDIR=/tmp
+    volumes:
+      - /mnt/user/appdata/backrest/data:/data
+      - /mnt/user/appdata/backrest/config:/config
+      - /mnt/user/appdata/backrest/cache:/cache
+      - /mnt/user/appdata/backrest/tmp:/tmp
+      - /mnt/user:/mnt/user
+      # SSH für Hetzner
+      - /mnt/user/appdata/backrest/ssh:/root/.ssh
+      # Quellen (Backup)
+      - /mnt/user/appdata:/source/appdata:ro
+      - /mnt/user:/source/user:ro
+      # WD Backup-Ziel
+      - /mnt/remotes/192.168.178.86/Public/backrest-repos:/repos/wd
+    networks:
+      - backend_net
+      - frontend_net
+    labels:
+      - traefik.enable=true
+      - traefik.docker.network=frontend_net
+      - traefik.http.routers.backrest.rule=Host(`backrest.kaleschke.info`)
+      - traefik.http.routers.backrest.entrypoints=websecure
+      - traefik.http.routers.backrest.tls=true
+      - traefik.http.services.backrest.loadbalancer.server.port=9898
+
+networks:
+  backend_net:
+    external: true
+  frontend_net:
+    external: true