diff --git a/nodes/heimdall/tracearr/compose.yaml b/nodes/heimdall/tracearr/compose.yaml
index dbcda52..43de6bf 100644
--- a/nodes/heimdall/tracearr/compose.yaml
+++ b/nodes/heimdall/tracearr/compose.yaml
@@ -28,8 +28,8 @@ services:
   tracearr:
     image: ghcr.io/connorgallopo/tracearr:latest
     container_name: tracearr
-    ports:
-      - "${PORT:-3000}:3000"
+    # ports:
+    #   - "${PORT:-3000}:3000"
     environment:
       - NODE_ENV=production
       - PORT=3000
@@ -53,6 +53,14 @@ services:
     networks:
       - tracearr-network
       - proxy-net
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.tracearr.entrypoints=websecure"
+      - "traefik.http.routers.tracearr.rule=Host(`tracearr.castaldifamily.com`)"
+      - "traefik.http.routers.tracearr.tls=true"
+      - "traefik.http.routers.tracearr.tls.certresolver=cloudflare"
+      - "traefik.http.services.tracearr.loadbalancer.server.port=3000"
+
 
   timescale:
     # TimescaleDB HA with PostgreSQL 18 - pinned for stability