diff --git a/docker-compose.yml b/docker-compose.yml
index 8ffdfe1..e0b028f 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,8 +1,6 @@
 services:
   server:
     image: docker.io/actualbudget/actual-server:25.5.0@sha256:3b486fbc0db02839917f65ed277aa509980f710b6e96dde966f5219983978179
-    ports:
-      - '5006:5006'
     environment:
       - ACTUAL_LOGIN_METHOD=openid
       - ACTUAL_OPENID_DISCOVERY_URL=${DC_ACTUAL_OPENID_DISCOVERY_URL:?}
@@ -10,6 +8,13 @@ services:
       - ACTUAL_OPENID_CLIENT_SECRET=${DC_ACTUAL_OPENID_CLIENT_SECRET:?}
       - ACTUAL_OPENID_SERVER_HOSTNAME=https://${DC_ACTUAL_HOSTNAME:?}
       - ACTUAL_OPENID_ENFORCE=true
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.actual.rule=Host(`${DC_ACTUAL_HOSTNAME:?}`)"
+      - "traefik.http.routers.actual.entrypoints=websecure"
+      - "traefik.http.services.actual.loadbalancer.server.port=${DC_ACTUAL_PORT:?}"
+    networks:
+      - traefik
 
     volumes:
       - data:/data
@@ -24,3 +29,7 @@ services:
 
 volumes:
   data:
+
+networks:
+  traefik:
+    external: true