diff --git a/dev.yml b/dev.yml
new file mode 100644
index 0000000000000000000000000000000000000000..19daed53def05f2f6f931e10fc0fa286cd4484bf
--- /dev/null
+++ b/dev.yml
@@ -0,0 +1,6 @@
+version: "3.4"
+
+services:
+  memorekall-member:
+    ports:
+      - "${MEMOREKALL_MEMBER_PORT}:80"
diff --git a/docker-compose.yml b/docker-compose.yml
index 07f02b8b4cfa95444bb7d1c429f3382a9015b6d1..d6986916d29d0c613018eef486acdb57d2870dd2 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -25,8 +25,6 @@ services:
     networks:
       - default
       - legacy
-    ports:
-      - "${MEMOREKALL_MEMBER_PORT}:80"
 
   legacy:
     build: ./docker/legacy
diff --git a/traefik.yml b/traefik.yml
new file mode 100644
index 0000000000000000000000000000000000000000..9d0486578b9a5b631e37ed3f30d938858c052258
--- /dev/null
+++ b/traefik.yml
@@ -0,0 +1,20 @@
+version: "3.4"
+
+services:
+  memorekall-member:
+    networks:
+      - default
+      - legacy
+      - traefik
+    labels:
+      - "traefik.enable=true"
+      - "traefik.docker.network=traefik"
+      - "traefik.http.routers.${NAME}.rule=Host(`${HOST}`)"
+      - "traefik.http.routers.${NAME}.tls.certresolver=myresolver"
+      - "traefik.http.routers.${NAME}.entrypoints=web,websecure"
+      - "traefik.http.routers.${NAME}.middlewares=hardening@docker"
+
+
+networks:
+  traefik:
+    external: true