diff --git a/docker-compose/minio/docker-compose.yml.j2 b/docker-compose/minio/docker-compose.yml.j2
index 0d8c9d22..c10c1fe1 100644
--- a/docker-compose/minio/docker-compose.yml.j2
+++ b/docker-compose/minio/docker-compose.yml.j2
@@ -15,6 +15,28 @@ services:
       MINIO_ROOT_USER: madmin # ändern
       MINIO_ROOT_PASSWORD: hallowelt # ändern
     command: server /data --console-address ":9001"
+    healthcheck:
+      test: ["CMD", "mc", "ready", "local"]
+      interval: 5s
+      timeout: 5s
+      retries: 5
+    labels:
+      traefik.http.routers.nextcloud.rule: Host(`nextcloud.mgrote.net`)
+      traefik.enable: true
+      traefik.http.routers.nextcloud.tls: true
+      traefik.http.routers.nextcloud.tls.certresolver: resolver_letsencrypt
+      traefik.http.routers.nextcloud.entrypoints: entry_https
+      traefik.http.services.nextcloud.loadbalancer.server.port: 80
+
+      traefik.http.middlewares.nextcloud-webdav.replacepathregex.regex: "^/.well-known/ca(l|rd)dav"
+      traefik.http.middlewares.nextcloud-webdav.replacepathregex.replacement: "/remote.php/dav/"
+
+      traefik.http.middlewares.nextcloud-hsts.headers.stsincludesubdomains: false
+      traefik.http.middlewares.nextcloud-hsts.headers.stspreload: true
+      traefik.http.middlewares.nextcloud-hsts.headers.stsseconds: 15552001
+      traefik.http.middlewares.nextcloud-hsts.headers.isdevelopment: false
+
+      traefik.http.routers.nextcloud.middlewares: nextcloud-hsts,nextcloud-webdav
 
 ######## Networks ########
 networks: