diff --git a/compose.yml b/compose.yml
index c24f8ff..a4fe55d 100644
--- a/compose.yml
+++ b/compose.yml
@@ -3,31 +3,44 @@ version: "3.9"
 services:
   db:
     image: mysql:8
-    restart: always
     container_name: mytimetracker-db
+    restart: always
     environment:
       MYSQL_DATABASE: mytimetracker
       MYSQL_ROOT_PASSWORD: root
       MYSQL_USER: appuser
       MYSQL_PASSWORD: apppass
-    ports:
-      - "3306:3306"
     volumes:
       - db_data:/var/lib/mysql
+    expose:
+      - "3306"
+    networks:
+      - traefik
 
   app:
     build: .
+    image: mytimetracker-app
     container_name: mytimetracker-app
     depends_on:
       - db
     ports:
-      - "8400:8080"
+      - "8400:8080"  # 8400 auf dem Host, 8080 im Container
     environment:
-      SPRING_DATASOURCE_URL: jdbc:mysql://db:3306/mytimetracker?useSSL=false&allowPublicKeyRetrieval=true&serverTimezone=UTC
-      SPRING_DATASOURCE_USERNAME: appuser
-      SPRING_DATASOURCE_PASSWORD: apppass
-      SPRING_JPA_HIBERNATE_DDL_AUTO: update
+      SPRING_PROFILES_ACTIVE: docker
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.mytimetracker.rule=Host(`timetracker.nilzbu.de`)"
+      - "traefik.http.routers.mytimetracker.entrypoints=websecure"
+      - "traefik.http.routers.mytimetracker.tls=true"
+      - "traefik.http.routers.mytimetracker.tls.certresolver=letsEncrypt"
+      - "traefik.http.services.mytimetracker.loadbalancer.server.port=8080"
+    networks:
+      - traefik
     restart: always
 
 volumes:
-  db_data:
\ No newline at end of file
+  db_data:
+
+networks:
+  traefik:
+    external: true
\ No newline at end of file