diff --git a/gitea-public/docker-compose.yml b/gitea-public/docker-compose.yml
new file mode 100644
index 0000000..0ac4543
--- /dev/null
+++ b/gitea-public/docker-compose.yml
@@ -0,0 +1,28 @@
+services:
+  gitea:
+    image: gitea/gitea:latest
+    container_name: gitea
+    restart: unless-stopped
+    environment:
+      - USER_UID=1000
+      - USER_GID=1000
+      - GITEA__server__DOMAIN=gitea.basti.badana.de
+      - GITEA__server__ROOT_URL=https://gitea.basti.badana.de/
+      - GITEA__server__SSH_DOMAIN=gitea.basti.badana.de
+      - GITEA__server__SSH_PORT=2222
+      - GITEA__database__DB_TYPE=sqlite3
+    ports:
+      - "2222:22"
+    volumes:
+      - ./data:/data
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.gitea.rule=Host(`gitea.basti.badana.de`)"
+      - "traefik.http.routers.gitea.entrypoints=websecure"
+      - "traefik.http.services.gitea.loadbalancer.server.port=3000"
+    networks:
+      - proxy
+
+networks:
+  proxy:
+    external: true
diff --git a/traefik-public/docker-compose.yml b/traefik-public/docker-compose.yml
new file mode 100644
index 0000000..1aa3ca8
--- /dev/null
+++ b/traefik-public/docker-compose.yml
@@ -0,0 +1,47 @@
+services:
+  traefik:
+    image: traefik:latest
+    container_name: traefik
+    restart: unless-stopped
+    ports:
+      - 80:80
+      - 443:443
+    networks:
+      - proxy
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+      - letsencrypt:/letsencrypt
+      - /var/log:/var/log
+    command:
+      - --api.dashboard=true
+      - --log.level=INFO
+      - --log.filepath=/var/log/traefik.log
+      - --accesslog=true
+      - --accesslog.filepath=/var/log/traefik-access.log
+      - --providers.docker=true
+      - --providers.docker.network=proxy
+      - --providers.docker.exposedByDefault=false
+      - --entrypoints.web.address=:80
+      - --entrypoints.web.http.redirections.entrypoint.to=websecure
+      - --entryPoints.web.http.redirections.entrypoint.scheme=https
+      - --entrypoints.websecure.address=:443
+      - --entrypoints.websecure.asDefault=true
+      - --entrypoints.websecure.http.tls.certresolver=myresolver
+      - --certificatesresolvers.myresolver.acme.email=bastian.bauhaus@gmail.com
+      - --certificatesresolvers.myresolver.acme.tlschallenge=true
+      - --certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.mydashboard.rule=Host(`traefik.basti.badana.de`)
+      - traefik.http.routers.mydashboard.service=api@internal
+      - traefik.http.routers.mydashboard.middlewares=myauth
+      # Passwort-Hash via: echo $(htpasswd -nB admin) | sed -e s/\\$/\\$\\$/g
+      - traefik.http.middlewares.myauth.basicauth.users=admin:$$apr1$$hoZBsSlH$$nS5vvmcU2bUR1A7Kjipkx.
+
+networks:
+  proxy:
+    external: true
+
+volumes:
+  letsencrypt:
+    name: letsencrypt