diff --git a/.drone.yml b/.drone.yml
index 8139990..8f250bb 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -2,38 +2,38 @@
 kind: pipeline
 name: deploy to swarm-test.autonomic.zone
 steps:
-  - name: deployment
-    image: git.coopcloud.tech/coop-cloud/stack-ssh-deploy:latest
-    settings:
-      host: swarm-test.autonomic.zone
-      stack: example_com  # UPDATE ME
-      generate_secrets: true
-      purge: true
-      deploy_key:
-        from_secret: drone_ssh_swarm_test
-      networks:
-        - proxy
-    environment:
-      DOMAIN: example.swarm-test.autonomic.zone # UPDATE ME
-      STACK_NAME: example_com  # UPDATE ME
-      LETS_ENCRYPT_ENV: staging
-      # Also set any config versions from abra.sh
+- name: deployment
+  image: git.coopcloud.tech/coop-cloud/stack-ssh-deploy:latest
+  settings:
+    host: swarm-test.autonomic.zone
+    stack: libretranslate
+    generate_secrets: true
+    purge: true
+    deploy_key:
+      from_secret: drone_ssh_swarm_test
+    networks:
+    - proxy
+  environment:
+    DOMAIN: libretranslate.swarm-test.autonomic.zone
+    STACK_NAME: libretranslate
+    LETS_ENCRYPT_ENV: staging
+    ENTRYPOINT_VERSION: v1
 trigger:
   branch:
-    - main
+  - main
 ---
 kind: pipeline
 name: generate recipe catalogue
 steps:
-  - name: release a new version
-    image: plugins/downstream
-    settings:
-      server: https://build.coopcloud.tech
-      token:
-        from_secret: drone_abra-bot_token
-      fork: true
-      repositories:
-        - toolshed/auto-recipes-catalogue-json
+- name: release a new version
+  image: plugins/downstream
+  settings:
+    server: https://build.coopcloud.tech
+    token:
+      from_secret: drone_abra-bot_token
+    fork: true
+    repositories:
+    - toolshed/auto-recipes-catalogue-json
 
 trigger:
   event: tag
diff --git a/.env.sample b/.env.sample
index e4cdb21..5c221cf 100644
--- a/.env.sample
+++ b/.env.sample
@@ -2,6 +2,7 @@ TYPE=libretranslate
 
 DOMAIN=libretranslate.example.com
 LETS_ENCRYPT_ENV=production
+COMPOSE_FILE="compose.yml"
 
 FRONTEND_TITLE="LibreTranslate"
 
@@ -15,4 +16,8 @@ REQUIRE_API_KEY="True"
 DISABLE_WEB_UI="False"
 
 METRICS="False"
-SECRET_METRICS_AUTH_TOKEN_VERSION=v1
\ No newline at end of file
+SECRET_METRICS_AUTH_TOKEN_VERSION=v1
+
+## Enable tinyauth forward auth
+#COMPOSE_FILE="$COMPOSE_FILE:compose.tiny.yml"
+#TINY_MIDDLEWARE="your_domain_com"
\ No newline at end of file
diff --git a/README.md b/README.md
index f2a52d5..59186dd 100644
--- a/README.md
+++ b/README.md
@@ -6,13 +6,13 @@
 
 * **Maintainer**: [brooke](https://git.coopcloud.tech/Brooke)
 * **Category**: Apps
-* **Status**: 0
+* **Status**: 3
 * **Image**: [`libretranslate`](https://hub.docker.com/r/libretranslate/libretranslate), 4, upstream
-* **Healthcheck**: No
-* **Backups**: No
-* **Email**: No
-* **Tests**: No
-* **SSO**: N/A
+* **Healthcheck**: Yes
+* **Backups**: Yes
+* **Email**: N/A
+* **Tests**: Yes
+* **SSO**: Yes (Tinyauth)
 
 <!-- endmetadata -->
 
@@ -24,6 +24,12 @@
 
 For more, see [`docs.coopcloud.tech`](https://docs.coopcloud.tech).
 
+## SSO
+
+SSO is provided by Tinyauth, this is best for an environment where you only plan to use the web interface and have no plans to make use of the API.
+
+This also requires deploying [Tinyauth](https://git.coopcloud.tech/coop-cloud/tinyauth) and [Traefik](https://git.coopcloud.tech/coop-cloud/traefik).
+
 ## API Keys
 
 Below is a list of commands you can use to generate/remove/view API keys. prefix any of the below commands with `abra app cmd <app-domain> app`
diff --git a/compose.tiny.yml b/compose.tiny.yml
new file mode 100644
index 0000000..812596d
--- /dev/null
+++ b/compose.tiny.yml
@@ -0,0 +1,6 @@
+---
+services:
+  app:
+    deploy:
+      labels:
+        - "traefik.http.routers.${STACK_NAME}.middlewares=${TINY_MIDDLEWARE}"