diff --git a/host-services/beszel/docker-compose.yml b/host-services/beszel/docker-compose.yml
new file mode 100644
index 0000000..228b829
--- /dev/null
+++ b/host-services/beszel/docker-compose.yml
@@ -0,0 +1,55 @@
+services:
+  beszel:
+    image: henrygd/beszel:latest
+    container_name: beszel
+    restart: unless-stopped
+
+    environment:
+      APP_URL: https://beszel.kaleschke.info
+
+    volumes:
+      - /mnt/user/appdata/beszel/data:/beszel_data
+      - /mnt/user/appdata/beszel/socket:/beszel_socket
+
+    ports:
+      - "127.0.0.1:8090:8090"
+
+    networks:
+      - frontend_net
+
+    security_opt:
+      - no-new-privileges:true
+
+    labels:
+      - traefik.enable=true
+      - traefik.docker.network=frontend_net
+      - traefik.http.routers.beszel.rule=Host(`beszel.kaleschke.info`)
+      - traefik.http.routers.beszel.entrypoints=websecure
+      - traefik.http.routers.beszel.tls=true
+      - traefik.http.routers.beszel.tls.certresolver=le
+      - traefik.http.services.beszel.loadbalancer.server.port=8090
+
+  beszel-agent:
+    image: henrygd/beszel-agent:latest
+    container_name: beszel-agent
+    restart: unless-stopped
+
+    network_mode: host
+
+    volumes:
+      - /mnt/user/appdata/beszel/agent:/var/lib/beszel-agent
+      - /mnt/user/appdata/beszel/socket:/beszel_socket
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+
+    environment:
+      LISTEN: /beszel_socket/beszel.sock
+      HUB_URL: http://127.0.0.1:8090
+      KEY: ""
+      TOKEN: ""
+
+    security_opt:
+      - no-new-privileges:true
+
+networks:
+  frontend_net:
+    external: true
\ No newline at end of file