diff --git a/ttrss-server/.env.j2 b/ttrss-server/.env.j2
new file mode 100644
index 0000000..817deb7
--- /dev/null
+++ b/ttrss-server/.env.j2
@@ -0,0 +1,12 @@
+PUID=1000
+PGID=1000
+TZ=Europe/Zurich
+TTRSS_DB_TYPE=mysql
+TTRSS_DB_PORT=3306
+
+APP_DOMAIN=test.2li.ch
+
+MYSQL_ROOT_PASSWORD={{ ttrss_mysql_root_password }}
+MYSQL_PASSWORD={{ ttrss_mysql_password }}
+MYSQL_DATABASE=ttrssdb
+MYSQL_USER=ttrss
diff --git a/ttrss-server/docker-compose.yml b/ttrss-server/docker-compose.yml
new file mode 100644
index 0000000..dc8be9e
--- /dev/null
+++ b/ttrss-server/docker-compose.yml
@@ -0,0 +1,60 @@
+---
+version: "2"
+
+services:
+  traefik:
+    image: "traefik:v2.2"
+    ports:
+      - "443:443"
+    volumes:
+      - "./traefik.yaml:/etc/traefik/traefik.yaml:ro"
+      - "./letsencrypt:/letsencrypt"
+      - "/var/run/docker.sock:/var/run/docker.sock:ro"
+    restart: unless-stopped
+
+  tt-rss:
+    image: registry.gitlab.com/lunik1/docker-tt-rss@sha256:35dc2dc3697e8c88cb57fbfaf6313ef41bf8fa6583dbb650e9e752587bb7b967
+    container_name: tt-rss
+    environment:
+      - PUID
+      - PGID
+      - TZ
+      - TTRSS_DB_TYPE
+      - "TTRSS_DB_USER=${MYSQL_USER}"
+      - "TTRSS_DB_NAME=${MYSQL_DATABASE}"
+      - "TTRSS_DB_PASS=${MYSQL_PASSWORD}"
+      - TTRSS_DB_PORT
+      - TTRSS_DB_HOST=db
+      - "TTRSS_SELF_URL_PATH=https://${APP_DOMAIN}"
+    volumes:
+      - tt-rss:/config
+    depends_on:
+      - db
+    links:
+      - db:db
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.ttrss.rule=Host(`${APP_DOMAIN}`)"
+      - "traefik.http.routers.ttrss.entrypoints=websecure"
+      - "traefik.http.routers.ttrss.tls.certresolver=myresolver"
+      - "traefik.http.routers.ttrss.middlewares=default-headers@file"
+    restart: always
+
+  db:
+    image: mariadb:10.3-bionic
+    command: --transaction-isolation=READ-COMMITTED --binlog-format=ROW
+    restart: always
+    volumes:
+      - ./db:/var/lib/mysql
+    environment:
+      - MYSQL_ROOT_PASSWORD
+      - MYSQL_PASSWORD
+      - MYSQL_DATABASE
+      - MYSQL_USER
+
+volumes:
+  tt-rss:
+    driver_opts:
+      type: "nfs"
+      o: "addr=10.7.89.108,nolock,hard,rw,vers=4.1"
+      device: ":/server_data/ttrss/config"