diff --git a/README.md b/README.md
index 1ebd473..8d9160c 100644
--- a/README.md
+++ b/README.md
@@ -70,6 +70,14 @@ To enable, set `MONITORING` to `true` and uncomment the line `#COMPOSE_FILE="$CO
 > MONITORING="true"
 > ```
 
+If you're using the
+[monitoring-ng](https://recipes.coopcloud.tech/monitoring-ng) recipe,
+insert the `metrics_token` with the value of `basic_auth`:
+
+```sh
+abra app secret insert garage.example.coop v1 metrics_token BASIC_AUTH
+```
+
 ### Deploying
 
 Now, undeploy the service, generate the new secrets, and finally re-deploy:
diff --git a/compose.monitoring.yml b/compose.monitoring.yml
index ad1ae35..a010fcd 100644
--- a/compose.monitoring.yml
+++ b/compose.monitoring.yml
@@ -15,6 +15,10 @@ services:
         - "traefik.http.routers.${STACK_NAME}-metrics.tls.certresolver=${LETS_ENCRYPT_ENV}"
         - "traefik.http.routers.${STACK_NAME}-metrics.service=${STACK_NAME}-metrics"
         - "traefik.http.services.${STACK_NAME}-metrics.loadbalancer.server.port=3903"
+        - "prometheus.io/scrape=true"
+        - "prometheus.io/port=3903"
+        - "prometheus.io/path=/metrics"
+        - "prometheus.io/auth=bearer"
 
 secrets:
   admin_token: