diff --git a/compose.yaml b/compose.yaml
index f6fdc79..743acbb 100644
--- a/compose.yaml
+++ b/compose.yaml
@@ -101,6 +101,12 @@ services:
         delay: 5s
         max_attempts: 3
         window: 120s
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.nexus.rule=Host(`nexus.noveria.net`)"
+      - "traefik.http.routers.nexus.tls=true"
+      - "traefik.http.routers.nexus.tls.certresolver=letsencrypt"
+      - "traefik.http.services.nexus.loadbalancer.server.port=80"
     ports:
       - "127.0.0.1:18880:80"
     depends_on:
@@ -112,7 +118,9 @@ services:
       timeout: 10s
       retries: 3
       start_period: 10s
-    networks: [nexus]
+    networks:
+      - nexus
+      - proxy
     logging:
       driver: "json-file"
       options:
@@ -123,6 +131,8 @@ networks:
   nexus:
   openclaw_default:
     external: true
+  proxy:
+    external: true
 
 volumes:
   nexus-postgres: