diff --git a/pihole/docker-compose.yml b/pihole/docker-compose.yml
index 0900ccf..fb4aef7 100644
--- a/pihole/docker-compose.yml
+++ b/pihole/docker-compose.yml
@@ -1,6 +1,8 @@
 version: "3.9"
 
 networks:
+  public:
+    external: true
   dns_net:
     name: dns_net
     driver: bridge
@@ -16,9 +18,10 @@ services:
     ports:
       - "53:53/tcp"
       - "53:53/udp"
-      - "8180:80/tcp"
+      # - "8180:80/tcp"
     hostname: pihole
     networks:
+      public: {}
       dns_net:
         ipv4_address: 172.20.0.10
     environment:
@@ -30,6 +33,18 @@ services:
     volumes:
       - "./pihole-data/:/etc/pihole/"
       - "./dnsmasq.d-data/:/etc/dnsmasq.d/"
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.pihole.rule=Host(`${PIHOLE_DOMAIN}`)"
+      - "traefik.http.routers.pihole.service=pihole-service"
+      - "traefik.http.services.pihole-service.loadbalancer.server.port=80"
+      - "traefik.http.routers.pihole.tls=true"
+      - "traefik.http.routers.pihole.tls.certresolver=le"
+      # - "traefik.http.middlewares.pihole-admin.addprefix.prefix=/admin"
+      - "traefik.http.middlewares.pihole-redirect.redirectregex.regex=^https://pihole.ykz.app/$$"
+      - "traefik.http.middlewares.pihole-redirect.redirectregex.replacement=https://pihole.ykz.app/admin"
+      - "traefik.http.middlewares.pihole-redirect.redirectregex.permanent=true"
+      - "traefik.http.routers.pihole.middlewares=pihole-redirect"
 
   unbound:
     image: mvance/unbound${IS_RPI}:latest