diff --git a/.env.sample b/.env.sample
index ec1441d..c011245 100644
--- a/.env.sample
+++ b/.env.sample
@@ -34,6 +34,9 @@ HUGO_ENVIRONMENT=production
 #AUTH_SITE_STAGING_ENABLED=1
 #SECRET_AUTH_PASSWORD_VERSION=v1
 
+# Anubis protection (don't forget to configure traefik)
+#COMPOSE_FILE="$COMPOSE_FILE:compose.anubis.yml"
+
 # Private repository deployment
 #COMPOSE_FILE="$COMPOSE_FILE:compose.private.yml"
 #COMPOSE_FILE="$COMPOSE_FILE:compose.private.staging.yml"
diff --git a/README.md b/README.md
index 8668d82..682ef36 100644
--- a/README.md
+++ b/README.md
@@ -65,6 +65,13 @@ Create a webhook which triggers the endpoint <your-domain>/deploy on push events
 Basic <bas64-coded-token>
 ```
 
+### Anubis Protection
+
+To enable Anubis scraper protection for your site,
+
+- First [enable Anubis on traefik](https://git.coopcloud.tech/coop-cloud/traefik#blocking-scrapers-with-anubis)
+- then - in your parasol config - uncomment the line after `# Anubis protection`.
+
 ### Use a Private Repository
 
 Enable the following lines in your `.env` file:
diff --git a/compose.anubis.yml b/compose.anubis.yml
new file mode 100644
index 0000000..f80927f
--- /dev/null
+++ b/compose.anubis.yml
@@ -0,0 +1,7 @@
+---
+version: "3.8"
+services:
+  app:
+    deploy:
+      labels:
+        - "traefik.http.routers.${STACK_NAME}.middlewares=anubis"