diff --git a/docker-compose/lldap/docker-compose.yml.j2 b/docker-compose/lldap/docker-compose.yml.j2
index be451abc..3ad4725a 100644
--- a/docker-compose/lldap/docker-compose.yml.j2
+++ b/docker-compose/lldap/docker-compose.yml.j2
@@ -18,15 +18,16 @@ services:
       - internal
     depends_on:
       - lldap-db17
-    # labels:
-    #   traefik.enable: true
-    #   traefik.http.routers.lldap.service: lldap
-    #   traefik.http.routers.lldap.priority: "10"
-    #   traefik.http.routers.lldap.rule: Host(`ldap.mgrote.net`)
-    #   traefik.http.routers.lldap.tls: true
-    #   traefik.http.routers.lldap.tls.certresolver: resolver_letsencrypt
-    #   traefik.http.routers.lldap.entrypoints: entry_https
-    #   traefik.http.services.lldap.loadbalancer.server.port: 17170
+    labels:
+      traefik.enable: true
+      traefik.http.routers.lldap.service: lldap
+      traefik.http.routers.lldap.priority: "10"
+      traefik.http.routers.lldap.rule: Host(`ldap.mgrote.net`)
+      traefik.http.routers.lldap.tls: true
+      traefik.http.routers.lldap.tls.certresolver: resolver_letsencrypt
+      traefik.http.routers.lldap.entrypoints: entry_https
+      traefik.http.services.lldap.loadbalancer.server.port: 17170
+      traefik.http.routers.lldap.middlewares: allowlist_localnet@file
 
 ######## Postgres ########
   lldap-db17:
@@ -61,7 +62,6 @@ volumes:
   db17:
 
 # chedckliste
-# backups pve/pbs löschen
 # munin + lldap mit 2fa
 # vm loschen + checkliste dafür
 # traefik aktivieren mit authelia und 2fa