diff --git a/.env.sample b/.env.sample
index bf7e753e8baae43049959bcc4e1576489d41794a..94376785c132f931b2915c90828b159911eeee41 100644
--- a/.env.sample
+++ b/.env.sample
@@ -1 +1,9 @@
+# Available configs :
+# docker-compose.yml : base, required
+# dev.yml to expose port 80 to $PORT
+# traefik.yml to access your pico from traefik
 DOCKER_FILE=docker-compose.yml:dev.yml
+PORT=8084
+NAME=monsite
+# Your fully qualified domain name
+HOST=FQDN
diff --git a/dev.yml b/dev.yml
index 099aa3d12680b2873aa1d341d2efa83d8d3ca42e..cd400b8a2796483fe88933732ea09ddc8f89dd67 100644
--- a/dev.yml
+++ b/dev.yml
@@ -3,4 +3,4 @@ version: "3"
 services:
   pico:
     ports:
-      - 8084:80
+      - ${PORT}:80
diff --git a/traefik.yml b/traefik.yml
new file mode 100644
index 0000000000000000000000000000000000000000..d9ee1bbb0fac1e1a0352767c79361fd29f467046
--- /dev/null
+++ b/traefik.yml
@@ -0,0 +1,18 @@
+version: '3'
+
+services:
+  pico:
+    networks:
+      - traefik
+    labels:
+      - "traefik.enable=true"
+      - "traefik.docker.network=traefik"
+      - "traefik.http.routers.${NAME}.rule=Host(`${HOST}`)"
+      - "traefik.http.routers.${NAME}.tls.certresolver=myresolver"
+      - "traefik.http.routers.${NAME}.entrypoints=web,websecure"
+      - "traefik.http.routers.${NAME}.middlewares=hardening@docker"
+
+
+networks:
+  traefik:
+    external: true