diff --git a/nodes/heimdall/zipline/compose.yaml b/nodes/heimdall/zipline/compose.yaml
index 257d98f..fc591df 100644
--- a/nodes/heimdall/zipline/compose.yaml
+++ b/nodes/heimdall/zipline/compose.yaml
@@ -21,8 +21,6 @@ services:
 
   zipline:
     image: ghcr.io/diced/zipline
-    ports:
-      - '3000:3000'
     env_file:
       - .env
     networks:
@@ -36,6 +34,14 @@ services:
       - '/mnt/appdata/zipline/uploads:/zipline/uploads'
       - '/mnt/appdata/zipline/public:/zipline/public'
       - '/mnt/appdata/zipline/themes:/zipline/themes'
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.zipline.entrypoints=websecure"
+      - "traefik.http.routers.zipline.rule=Host(`zipline.castaldifamily.com`)"
+      - "traefik.http.routers.zipline.tls=true"
+      - "traefik.http.routers.zipline.tls.certresolver=cloudflare"
+      - "traefik.http.services.zipline.loadbalancer.server.port=3000"
+
     healthcheck:
       test: ['CMD', 'wget', '-q', '--spider', 'http://localhost:3000/api/healthcheck']
       interval: 15s