diff --git a/docker-compose/nginx/compose.yaml b/docker-compose/nginx/compose.yaml
index 7527ef1..f08c566 100644
--- a/docker-compose/nginx/compose.yaml
+++ b/docker-compose/nginx/compose.yaml
@@ -5,9 +5,22 @@ services:
     container_name: nginx
     ports:
       - 80:80
-      # (optional) uncomment the line below to enable HTTPS
-      # - 443:443
+      - 443:443
     volumes:
       - ./config/default.conf:/etc/nginx/conf.d/default.conf:ro
       - ./data:/usr/share/nginx/html:ro
+    labels:
+      - traefik.enable=true
+      - traefik.http.services.nginx.loadbalancer.server.port=80
+      - traefik.http.routers.nginx.entrypoints=websecure
+      - traefik.http.routers.nginx.rule=Host(`example.com`)
+      - traefik.http.routers.nginx.tls=true
+      - traefik.http.routers.nginx.tls.certresolver=cloudflare
+      - traefik.http.routers.nginx.service=nginx
+    networks:
+      - frontend
     restart: unless-stopped
+
+networks:
+  frontend:
+    external: true
diff --git a/docker-compose/nginx/config/default.conf b/docker-compose/nginx/config/default.conf
index a2f1d40..9f61a69 100644
--- a/docker-compose/nginx/config/default.conf
+++ b/docker-compose/nginx/config/default.conf
@@ -4,5 +4,6 @@ server {
   location / {
     root /usr/share/nginx/html;
     index index.html;
+    access_log on;
   }
 }