diff --git a/mastodon/docker-compose.latest.yml b/mastodon/docker-compose.latest.yml
index 87a4cbb..3c99ea8 100644
--- a/mastodon/docker-compose.latest.yml
+++ b/mastodon/docker-compose.latest.yml
@@ -71,8 +71,8 @@ services:
     healthcheck:
       # prettier-ignore
       test: ['CMD-SHELL',"curl -s --noproxy localhost localhost:3000/health | grep -q 'OK' || exit 1"]
-    ports:
-      - '127.0.0.1:3000:3000'
+    # ports:
+    #   - '127.0.0.1:3000:3000'
     depends_on:
       - db
       - redis
@@ -81,6 +81,12 @@ services:
       # - ./public/system:/mastodon/public/system
       # /mastodon/public/system
       - /srv/mastodon/web:/mastodon/public/system
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.mastodonweb.rule=Host(`kvist.knast.cc`)
+      - traefik.http.routers.mastodonweb.entrypoints=websecure
+      - traefik.http.routers.mastodonweb.tls.certresolver=letsencr
+      - traefik.http.services.mastodonweb.loadbalancer.server.port=3000
 
   streaming:
     # You can uncomment the following lines if you want to not use the prebuilt image, for example if you have local code changes
@@ -97,11 +103,17 @@ services:
     healthcheck:
       # prettier-ignore
       test: ['CMD-SHELL', "curl -s --noproxy localhost localhost:4000/api/v1/streaming/health | grep -q 'OK' || exit 1"]
-    ports:
-      - '127.0.0.1:4000:4000'
+    # ports:
+    #   - '127.0.0.1:4000:4000'
     depends_on:
       - db
       - redis
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.mastodonstreaming.rule=(Host(`kvist.knast.cc`) && PathPrefix(`/api/v1/streaming`))
+      - traefik.http.routers.mastodonstreaming.entrypoints=websecure
+      - traefik.http.routers.mastodonstreaming.tls.certresolver=letsencr
+      - traefik.http.services.mastodonstreaming.loadbalancer.server.port=4000
 
   sidekiq:
     # You can uncomment the following line if you want to not use the prebuilt image, for example if you have local code changes