diff --git a/portainer/docker-compose.yml b/portainer/docker-compose.yml
index 30f1f9d..7f87df6 100644
--- a/portainer/docker-compose.yml
+++ b/portainer/docker-compose.yml
@@ -1,3 +1,4 @@
+#docker stack deploy portainer --compose-file docker-compose.yml
 version: '3.2'
 
 services:
@@ -18,7 +19,6 @@ services:
     command: -H tcp://tasks.agent:9001 --tlsskipverify
     ports:
       - "9443:9443"
-      - "9000:9000"
       - "8000:8000"
     volumes:
       - type: bind
@@ -26,6 +26,7 @@ services:
         target: /data
     networks:
       - agent_network
+      - traefik_proxy
     deploy:
       mode: replicated
       replicas: 1
@@ -34,14 +35,24 @@ services:
       labels:
         - homepage.group=Management
         - homepage.name=Portainer
-        - homepage.icon=portainer
+        - homepage.icon=sh-portainer-light
         - homepage.href=https://portainer.dua.casa/
         - homepage.description=Portainer is a universal container management platform.
         - homepage.widget.type=portainer
-        - homepage.widget.url=https://cluster.localdomain:9443
+        - homepage.widget.url=https://portainer.apps.dua.casa/
         - homepage.widget.env=1
         - homepage.widget.key=ptr_2Paj0QMqSY3QE4xGMdxnsncsw8qIBBnflLNtxRZz1a8=
+
+        - "traefik.enable=true"
+        - "traefik.http.routers.portainer.rule=Host(`portainer.apps.dua.casa`)"
+        - "traefik.http.routers.portainer.entrypoints=websecure"
+        - "traefik.http.routers.portainer.tls=true"
+        - "traefik.http.routers.portainer.tls.certresolver=letsencrypt"
+        - "traefik.http.services.portainer.loadbalancer.server.port=9443"
+        - "traefik.http.services.portainer.loadbalancer.server.scheme=https"
 networks:
   agent_network:
     driver: overlay
     attachable: true
+  traefik_proxy:
+    external: true
diff --git a/traefik/docker-compose.yml b/traefik/docker-compose.yml
index 36f93d9..b84bb63 100644
--- a/traefik/docker-compose.yml
+++ b/traefik/docker-compose.yml
@@ -49,6 +49,8 @@ services:
       - "--certificatesResolvers.letsencrypt.acme.storage=/acme/acme.json"
       - "--certificatesResolvers.letsencrypt.acme.dnsChallenge.provider=cloudflare"
 
+      - "--serversTransport.insecureSkipVerify=true"
+
       # Providers
 
       # Enable the Docker Swarm provider (instead of Docker provider)