diff --git a/docker-compose.yml b/docker-compose.yml
index 3578755..0f50e2f 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,68 +1,60 @@
-version: "3.9"
-
 services:
   app:
     build: .
     container_name: itinova-budget-si-app
     restart: unless-stopped
-    ports:
-      - "3042:3000"
     environment:
       - NODE_ENV=production
-      - DATABASE_URL=${DATABASE_URL}
-      - JWT_SECRET=${JWT_SECRET}
-      - VITE_APP_ID=${VITE_APP_ID}
-      - OAUTH_SERVER_URL=${OAUTH_SERVER_URL}
-      - VITE_OAUTH_PORTAL_URL=${VITE_OAUTH_PORTAL_URL}
-      - OWNER_OPEN_ID=${OWNER_OPEN_ID}
-      - OWNER_NAME=${OWNER_NAME}
-      - BUILT_IN_FORGE_API_URL=${BUILT_IN_FORGE_API_URL}
-      - BUILT_IN_FORGE_API_KEY=${BUILT_IN_FORGE_API_KEY}
-      - VITE_FRONTEND_FORGE_API_KEY=${VITE_FRONTEND_FORGE_API_KEY}
-      - VITE_FRONTEND_FORGE_API_URL=${VITE_FRONTEND_FORGE_API_URL}
-      - VITE_ANALYTICS_ENDPOINT=${VITE_ANALYTICS_ENDPOINT}
-      - VITE_ANALYTICS_WEBSITE_ID=${VITE_ANALYTICS_WEBSITE_ID}
+      - DATABASE_URL=mysql://budget_user:BudgetSI2027!@db:3306/budget_si
+      - JWT_SECRET=${JWT_SECRET:-budget-si-recette-jwt-secret-2027}
+      - VITE_APP_ID=${VITE_APP_ID:-}
+      - OAUTH_SERVER_URL=${OAUTH_SERVER_URL:-}
+      - VITE_OAUTH_PORTAL_URL=${VITE_OAUTH_PORTAL_URL:-}
+      - OWNER_OPEN_ID=${OWNER_OPEN_ID:-}
+      - OWNER_NAME=${OWNER_NAME:-Administrateur}
+      - BUILT_IN_FORGE_API_URL=${BUILT_IN_FORGE_API_URL:-}
+      - BUILT_IN_FORGE_API_KEY=${BUILT_IN_FORGE_API_KEY:-}
+      - VITE_FRONTEND_FORGE_API_KEY=${VITE_FRONTEND_FORGE_API_KEY:-}
+      - VITE_FRONTEND_FORGE_API_URL=${VITE_FRONTEND_FORGE_API_URL:-}
+      - VITE_ANALYTICS_ENDPOINT=${VITE_ANALYTICS_ENDPOINT:-}
+      - VITE_ANALYTICS_WEBSITE_ID=${VITE_ANALYTICS_WEBSITE_ID:-}
     depends_on:
       db:
         condition: service_healthy
     networks:
-      - budget-net
+      - budget-internal
+      - web
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.budget-si.rule=Host(`budget-si.recette.santinova-soft.org`)"
+      - "traefik.http.routers.budget-si.entrypoints=websecure"
+      - "traefik.http.routers.budget-si.tls.certresolver=letsencrypt"
+      - "traefik.http.services.budget-si.loadbalancer.server.port=3000"
 
   db:
     image: mysql:8.0
     container_name: itinova-budget-si-db
     restart: unless-stopped
     environment:
-      MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD:-BudgetSI2027!}
-      MYSQL_DATABASE: ${MYSQL_DATABASE:-budget_si}
-      MYSQL_USER: ${MYSQL_USER:-budget_user}
-      MYSQL_PASSWORD: ${MYSQL_PASSWORD:-BudgetSI2027!}
+      MYSQL_ROOT_PASSWORD: BudgetSI2027!
+      MYSQL_DATABASE: budget_si
+      MYSQL_USER: budget_user
+      MYSQL_PASSWORD: BudgetSI2027!
     volumes:
       - db_data:/var/lib/mysql
     healthcheck:
-      test: ["CMD", "mysqladmin", "ping", "-h", "localhost", "-u", "root", "-p${MYSQL_ROOT_PASSWORD:-BudgetSI2027!}"]
+      test: ["CMD", "mysqladmin", "ping", "-h", "localhost", "-u", "root", "-pBudgetSI2027!"]
       interval: 10s
       timeout: 5s
       retries: 5
     networks:
-      - budget-net
-
-  nginx:
-    image: nginx:alpine
-    container_name: itinova-budget-si-nginx
-    restart: unless-stopped
-    ports:
-      - "3043:80"
-    volumes:
-      - ./nginx.conf:/etc/nginx/conf.d/default.conf:ro
-    depends_on:
-      - app
-    networks:
-      - budget-net
+      - budget-internal
 
 volumes:
   db_data:
 
 networks:
-  budget-net:
+  budget-internal:
     driver: bridge
+  web:
+    external: true