diff --git a/apps/compose.yaml b/apps/compose.yaml
index 6f79718..c597a26 100644
--- a/apps/compose.yaml
+++ b/apps/compose.yaml
@@ -30,6 +30,7 @@ include:
   - plausible/compose.yaml
   - plex/compose.yaml
   - plex-trakt-sync/compose.yaml
+  - portainer/compose.yaml
   - prowlarr/compose.yaml
   - realdebrid-account-monitor/compose.yaml
   - recyclarr/compose.yaml
diff --git a/apps/portainer/.env b/apps/portainer/.env
new file mode 100644
index 0000000..81bd452
--- /dev/null
+++ b/apps/portainer/.env
@@ -0,0 +1 @@
+PORTAINER_HOSTNAME=
\ No newline at end of file
diff --git a/apps/portainer/compose.yaml b/apps/portainer/compose.yaml
new file mode 100644
index 0000000..082d030
--- /dev/null
+++ b/apps/portainer/compose.yaml
@@ -0,0 +1,20 @@
+services:
+  portainer:
+    image: portainer/portainer-ce:latest
+    container_name: portainer
+    restart: unless-stopped
+    expose:
+      - 9000
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.portainer.rule=Host(`${PORTAINER_HOSTNAME?}`)"
+      - "traefik.http.routers.portainer.entrypoints=websecure"
+      - "traefik.http.routers.portainer.tls.certresolver=letsencrypt"
+      - "traefik.http.services.portainer.loadbalancer.server.port=9000"
+      - "traefik.http.routers.portainer.middlewares=authelia@docker"
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+      - ${DOCKER_DATA_DIR}/portainer:/data
+    profiles:
+      - portainer
+      - all
\ No newline at end of file