diff --git a/.gitignore b/.gitignore
index 1e11257..b904a1c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,4 +1,5 @@
 docs/build
-log/*.log
-log/*.gz
+traefik/log/*.log
+traefik/log/*.gz
+traefik/tls/*.json
 .local
diff --git a/compose.yml b/compose.yml
index 1b42e23..306923b 100644
--- a/compose.yml
+++ b/compose.yml
@@ -17,8 +17,9 @@ services:
       - 8080:8080
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock:ro
-      - ./traefik:/etc/traefik:ro
-      - ./log:/var/log/traefik:rw
+      - ./traefik/etc:/etc/traefik:ro
+      - ./traefik/log:/var/log/traefik
+      - ./traefik/tls:/letsencrypt
 
   nginx:
     image: nginx:latest
@@ -27,6 +28,7 @@ services:
       - traefik.http.routers.rskio.entrypoints=websecure
       - traefik.http.routers.rskio.rule=Host(`rskio.com`)
       - traefik.http.routers.rskio.tls=true
+      - traefik.http.routers.rskio.tls.certresolver=rskio_certresolver
       - traefik.http.routers.rskio.service=rskio@docker
       - traefik.http.services.rskio.loadbalancer.server.port=80
     volumes:
diff --git a/traefik/dynamic.yml b/traefik/etc/dynamic.yml
similarity index 100%
rename from traefik/dynamic.yml
rename to traefik/etc/dynamic.yml
diff --git a/traefik/traefik.yml b/traefik/etc/traefik.yml
similarity index 80%
rename from traefik/traefik.yml
rename to traefik/etc/traefik.yml
index 2b50fa1..db0509d 100644
--- a/traefik/traefik.yml
+++ b/traefik/etc/traefik.yml
@@ -15,6 +15,13 @@ entryPoints:
     http3:
       advertisedPort: 443
 
+certificatesresolvers:
+  rskio_certresolver:
+    acme:
+      tlschallenge: true
+      email: rskntroot@gmail.com
+      storage: /letsencrypt/acme.json
+
 log:
   level: INFO
   format: json