diff --git a/docker-compose.yaml b/docker-compose.yaml
index 0c353fe..13ec7e6 100644
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -3,28 +3,42 @@ services:
     image: ghcr.io/matrix-construct/tuwunel:latest
     container_name: tuwunel
     restart: unless-stopped
-    ports:
-      - "8008:8008"
+    expose:
+      - "8008"
     environment:
       TUWUNEL_SERVER_NAME: "mmdv-chats.dynv6.net"
       TUWUNEL_DATABASE_PATH: "/var/lib/tuwunel"
       TUWUNEL_PORT: "8008"
       TUWUNEL_ADDRESS: "0.0.0.0"
       TUWUNEL_ALLOW_REGISTRATION: "true"
-      TUWUNEL_REGISTRATION_TOKEN: "dbd9585633ff312b7791724887b48943"
+      TUWUNEL_REGISTRATION_TOKEN: "8ec732f7430412f977e38ba1c1b47ae1"
       TUWUNEL_ALLOW_FEDERATION: "true"
       TUWUNEL_TRUSTED_SERVERS: "[\"matrix.org\"]"
     volumes:
       - tuwunel-db:/var/lib/tuwunel
+    labels:
+      traefik.enable: "true"
+      traefik.http.routers.tuwunel-http.entrypoints: "https"
+      traefik.http.routers.tuwunel-http.rule: "Host(`mmdv-chats.dynv6.net`)"
+      traefik.http.routers.tuwunel-http.tls.certresolver: "letsencrypt"
+      traefik.http.routers.tuwunel-http.service: "tuwunel"
+      traefik.http.services.tuwunel.loadbalancer.server.port: "8008"
 
   well-known:
     image: nginx:alpine
     container_name: tuwunel-wellknown
     restart: unless-stopped
-    ports:
-      - "8080:80"
+    expose:
+      - "80"
     volumes:
       - ./well-known:/usr/share/nginx/html/.well-known:ro
+    labels:
+      traefik.enable: "true"
+      traefik.http.routers.tuwunel-wk.entrypoints: "https"
+      traefik.http.routers.tuwunel-wk.rule: "Host(`mmdv-chats.dynv6.net`) && PathPrefix(`/.well-known`)"
+      traefik.http.routers.tuwunel-wk.tls.certresolver: "letsencrypt"
+      traefik.http.routers.tuwunel-wk.service: "tuwunel-wk"
+      traefik.http.services.tuwunel-wk.loadbalancer.server.port: "80"
 
 volumes:
   tuwunel-db:
diff --git a/docker-compose.yml b/docker-compose.yml
index 0c353fe..13ec7e6 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -3,28 +3,42 @@ services:
     image: ghcr.io/matrix-construct/tuwunel:latest
     container_name: tuwunel
     restart: unless-stopped
-    ports:
-      - "8008:8008"
+    expose:
+      - "8008"
     environment:
       TUWUNEL_SERVER_NAME: "mmdv-chats.dynv6.net"
       TUWUNEL_DATABASE_PATH: "/var/lib/tuwunel"
       TUWUNEL_PORT: "8008"
       TUWUNEL_ADDRESS: "0.0.0.0"
       TUWUNEL_ALLOW_REGISTRATION: "true"
-      TUWUNEL_REGISTRATION_TOKEN: "dbd9585633ff312b7791724887b48943"
+      TUWUNEL_REGISTRATION_TOKEN: "8ec732f7430412f977e38ba1c1b47ae1"
       TUWUNEL_ALLOW_FEDERATION: "true"
       TUWUNEL_TRUSTED_SERVERS: "[\"matrix.org\"]"
     volumes:
       - tuwunel-db:/var/lib/tuwunel
+    labels:
+      traefik.enable: "true"
+      traefik.http.routers.tuwunel-http.entrypoints: "https"
+      traefik.http.routers.tuwunel-http.rule: "Host(`mmdv-chats.dynv6.net`)"
+      traefik.http.routers.tuwunel-http.tls.certresolver: "letsencrypt"
+      traefik.http.routers.tuwunel-http.service: "tuwunel"
+      traefik.http.services.tuwunel.loadbalancer.server.port: "8008"
 
   well-known:
     image: nginx:alpine
     container_name: tuwunel-wellknown
     restart: unless-stopped
-    ports:
-      - "8080:80"
+    expose:
+      - "80"
     volumes:
       - ./well-known:/usr/share/nginx/html/.well-known:ro
+    labels:
+      traefik.enable: "true"
+      traefik.http.routers.tuwunel-wk.entrypoints: "https"
+      traefik.http.routers.tuwunel-wk.rule: "Host(`mmdv-chats.dynv6.net`) && PathPrefix(`/.well-known`)"
+      traefik.http.routers.tuwunel-wk.tls.certresolver: "letsencrypt"
+      traefik.http.routers.tuwunel-wk.service: "tuwunel-wk"
+      traefik.http.services.tuwunel-wk.loadbalancer.server.port: "80"
 
 volumes:
   tuwunel-db: