diff --git a/compose.yml b/compose.yml
index dab5776..ea7fd36 100644
--- a/compose.yml
+++ b/compose.yml
@@ -1,4 +1,3 @@
-# compose.yml
 # Primary compose file, used to manage the traefik and other network related modules
 # Other compose files to be run named and used my service
 services:
@@ -15,7 +14,24 @@ services:
       - "./traefik.yml:/etc/traefik/traefik.yml:ro" # sets the traefik.yml file as the options file for configuring proxy settings
     networks:
       traefik:
-        - ipv4_address: 172.21.0.1
+        ipv4_address: 172.21.0.10
+    labels:
+      - "traefik.enable=true"
+
+      - "traefik.http.routers.dashboard.rule=Host(`traefik.riverrooks.dev`)"
+      - "traefik.http.routers.dashboard.entrypoints=websecure"
+      - "traefik.http.routers.dashboard.service=api@internal"
+
+      - "traefik.http.routers.dashboard.tls=true"
+      - "traefik.http.routers.dashboard.tls.certresolver=basic"
+
+
+      #  MIDDLEWARE
+      #  enable auth MIDDLEWARE
+      - "traefik.http.routers.dashboard.middlewares=auth"
+      #  define auth type and traffic
+      - "traefik.http.middlewares.auth.basicauth.users=admin:$$apr1$$cnS8Mv7V$$djacpseKy6M4.XbgG4kgb1"
+
   wg-easy:
     image: ghcr.io/wg-easy/wg-easy
     container_name: wg-easy
@@ -42,11 +58,10 @@ services:
     # The Web UI (51821) is handled by Traefik labels instead.
     ports:
       - "51820:51820/udp"
-
     networks:
-      - traefik
+      traefik: {}
       dfnk:
-        - ipv4_address: 10.8.0.2
+        ipv4_address: 10.8.0.2
 
     labels:
         # since by default containers are disabled, we need to enable them
@@ -68,6 +83,10 @@ services:
 
 networks:
   traefik:
+    name: traefik
     external: true
   dfnk:
-    bridge: true
+    driver: bridge
+    ipam:
+      config:
+        - subnet: 10.8.0.0/24