diff --git a/00_teleport/docker-compose.yml b/00_teleport/docker-compose.yml
new file mode 100644
index 0000000..2ccb5bd
--- /dev/null
+++ b/00_teleport/docker-compose.yml
@@ -0,0 +1,25 @@
+services:
+  teleport:
+    image: public.ecr.aws/gravitational/teleport-distroless:18
+    container_name: teleport-den
+    restart: unless-stopped
+
+    networks:
+      - tan-network
+
+    volumes:
+      - /opt/stacks/00_teleport/config:/etc/teleport
+      - /home/docker/teleport/data:/var/lib/teleport
+
+    labels:
+      - "traefik.enable=true"
+      # HTTPS entry
+      - "traefik.http.routers.teleport.rule=Host(`teleport.luckyden.org`)"
+      - "traefik.http.routers.teleport.entrypoints=websecure"
+      - "traefik.http.routers.teleport.tls=true"
+      - "traefik.http.services.teleport.loadbalancer.server.port=3080"
+      # - "traefik.http.routers.teleport.middlewares=authentik@docker"
+
+networks:
+  tan-network:
+    external: true