diff --git a/webapp/.env b/webapp/.env
new file mode 100644
index 0000000..e69de29
diff --git a/webapp/build.sh b/webapp/build.sh
index 80eb333..4027c44 100644
--- a/webapp/build.sh
+++ b/webapp/build.sh
@@ -3,7 +3,8 @@
 docker run -d --name apache -p80:80 -v/root/kopano/dist:/var/www httpd
 # export DOCKER_BUILDKIT=1
 docker build -t webapp .
-docker run --rm -it --name webapp -v/root/kopano/webapp/etc/apache2:/etc/apache2 -v/root/kopano/webapp/etc/ssl:/etc/ssl webapp 
+# docker tag -t webapp:latest ...
+docker run --rm -it --name webapp -d MAIL_DOMAIN=zntrl.de -v/root/kopano/webapp/etc/apache2:/etc/apache2 -v/root/kopano/webapp/etc/ssl:/etc/ssl webapp 
 docker logs -f webapp
 docker exec -it webapp bash
 
diff --git a/webapp/docker-compose.yml b/webapp/docker-compose.yml
new file mode 100644
index 0000000..f83bd1e
--- /dev/null
+++ b/webapp/docker-compose.yml
@@ -0,0 +1,27 @@
+version: '1'
+services:
+  webapp:
+    image: webapp:latest
+    container_name: webapp
+    env_file: .env
+    restart: always
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.webapp.rule=Host(`mail.$MAIL_DOMAIN`)
+      - traefik.http.routers.webapp.entrypoints=web-secure
+      - traefik.http.routers.webapp.tls=true
+      - traefik.http.routers.webapp.tls.certResolver=default
+      # - traefik.http.routers.webapp.tls.options=strongcipher@file
+      # - traefik.http.services.webapp.loadbalancer.server.port=80
+    networks:
+      - kopano
+      - traefik
+    volumes:
+      - z-push:/var/lib/z-push
+networks:
+  - kopano:
+      external: true
+  - traefik:
+      external: true
+volumes:
+  - z-push: