diff --git a/docker-compose.yml b/docker-compose.yml
index 30ba928..ba2e615 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -44,9 +44,27 @@ services:
     depends_on:
       - backend
     restart: unless-stopped
-    # Coolify/Traefik gère le routage HTTPS — pas de binding direct sur le port hôte.
     expose:
       - "80"
+    networks:
+      - default
+      - coolify
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.notesfrais.rule=Host(`frais.domench.fr`)"
+      - "traefik.http.routers.notesfrais.entrypoints=https"
+      - "traefik.http.routers.notesfrais.tls=true"
+      - "traefik.http.routers.notesfrais.tls.certresolver=letsencrypt"
+      - "traefik.http.services.notesfrais.loadbalancer.server.port=80"
+      - "traefik.http.routers.notesfrais-http.rule=Host(`frais.domench.fr`)"
+      - "traefik.http.routers.notesfrais-http.entrypoints=http"
+      - "traefik.http.routers.notesfrais-http.middlewares=notesfrais-https-redirect"
+      - "traefik.http.middlewares.notesfrais-https-redirect.redirectscheme.scheme=https"
+      - "traefik.http.middlewares.notesfrais-https-redirect.redirectscheme.permanent=true"
+
+networks:
+  coolify:
+    external: true
 
 volumes:
   pgdata: