diff --git a/ops/portainer/docker-compose.yml b/ops/portainer/docker-compose.yml
new file mode 100644
index 0000000..4dbf933
--- /dev/null
+++ b/ops/portainer/docker-compose.yml
@@ -0,0 +1,27 @@
+version: "3.9"
+
+services:
+  portainer:
+    image: portainer/portainer-ce:2.21.5
+    container_name: PortainerCE
+    restart: unless-stopped
+
+    volumes:
+      - /mnt/user/appdata/portainer:/data
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+
+    networks:
+      - frontend_net
+
+    labels:
+      - "traefik.enable=true"
+      - "traefik.docker.network=frontend_net"
+      - "traefik.http.routers.portainer.rule=Host(`portainer.kaleschke.info`)"
+      - "traefik.http.routers.portainer.entrypoints=websecure"
+      - "traefik.http.routers.portainer.tls.certresolver=le"
+      - "traefik.http.routers.portainer.middlewares=dashboard-auth@file,secure-headers@file"
+      - "traefik.http.services.portainer.loadbalancer.server.port=9000"
+
+networks:
+  frontend_net:
+    external: true
\ No newline at end of file