diff --git a/docker-compose/minio/docker-compose.yml.j2 b/docker-compose/minio/docker-compose.yml.j2
index c10c1fe1..d9cb71c6 100644
--- a/docker-compose/minio/docker-compose.yml.j2
+++ b/docker-compose/minio/docker-compose.yml.j2
@@ -12,8 +12,8 @@ services:
     volumes:
       - data:/data # wird im "command" verwendet/gesetzt
     environment:
-      MINIO_ROOT_USER: madmin # ändern
-      MINIO_ROOT_PASSWORD: hallowelt # ändern
+      MINIO_ROOT_USER: "{{ lookup('viczem.keepass.keepass', 'minio_admin_user', 'username') }}"
+      MINIO_ROOT_PASSWORD: "{{ lookup('viczem.keepass.keepass', 'minio_admin_user', 'password') }}"
     command: server /data --console-address ":9001"
     healthcheck:
       test: ["CMD", "mc", "ready", "local"]
@@ -21,22 +21,12 @@ services:
       timeout: 5s
       retries: 5
     labels:
-      traefik.http.routers.nextcloud.rule: Host(`nextcloud.mgrote.net`)
+      traefik.http.routers.minio.rule: Host(`s3.mgrote.net`)
       traefik.enable: true
-      traefik.http.routers.nextcloud.tls: true
-      traefik.http.routers.nextcloud.tls.certresolver: resolver_letsencrypt
-      traefik.http.routers.nextcloud.entrypoints: entry_https
-      traefik.http.services.nextcloud.loadbalancer.server.port: 80
-
-      traefik.http.middlewares.nextcloud-webdav.replacepathregex.regex: "^/.well-known/ca(l|rd)dav"
-      traefik.http.middlewares.nextcloud-webdav.replacepathregex.replacement: "/remote.php/dav/"
-
-      traefik.http.middlewares.nextcloud-hsts.headers.stsincludesubdomains: false
-      traefik.http.middlewares.nextcloud-hsts.headers.stspreload: true
-      traefik.http.middlewares.nextcloud-hsts.headers.stsseconds: 15552001
-      traefik.http.middlewares.nextcloud-hsts.headers.isdevelopment: false
-
-      traefik.http.routers.nextcloud.middlewares: nextcloud-hsts,nextcloud-webdav
+      traefik.http.routers.minio.tls: true
+      traefik.http.routers.minio.tls.certresolver: resolver_letsencrypt
+      traefik.http.routers.minio.entrypoints: entry_https
+      traefik.http.services.minio.loadbalancer.server.port: 80
 
 ######## Networks ########
 networks:
@@ -47,17 +37,16 @@ volumes:
   data:
 
 # todo
-# traefik
+
 # minio inr enobate aufgabe
 # bug: composoe pull staret updated container nciht
 # mcli paket installieren
-#ldap? https://github.com/lldap/lldap/blob/main/example_configs/minio.md
 # client: wget https://dl.min.io/client/mc/release/linux-amd64/mc chmod +x mc
 #erstelle user
 #erstelle access und secrte_key
 #erstelle policy
 #weise policy user zu
-#./mc alias set minio_lokal http://docker10.mgrote.net:9000 t8lwsheP7nuw0pI27gBO EmxR6Obfu7bpBUS53IWfvI3dXzwUriCbXHlung39
+#./mc alias set minio_lokal http://docker10.mgrote.net:9000 access secret
 # remove midnehoght commander überall
 # checkliste
 # policies in wiki mit reihenfolge
diff --git a/keepass_db.kdbx b/keepass_db.kdbx
index 5aeab26a..692beae4 100644
Binary files a/keepass_db.kdbx and b/keepass_db.kdbx differ