diff --git a/.env.sample b/.env.sample
index 259c401..c721546 100644
--- a/.env.sample
+++ b/.env.sample
@@ -13,6 +13,12 @@ COMPOSE_FILE="compose.yml"
 #TFA_MIDDLEWARE_NAME="keycloak"
 #COMPOSE_FILE="$COMPOSE_FILE:compose.sso.yml"
 
+# Password Sign-On using traefik http password
+# Use htpasswd to generate the passwords for the user list, then set the below variable to
+# something like 'username:$$passwordhash', comma separated for multiple users. 
+#HTTP_BASIC_AUTH_PASSWORDS=
+#COMPOSE_FILE="$COMPOSE_FILE:compose.basicauth.yml"
+
 # The voila version to pin to (can be overriden by requirements.txt)
 VOILA_VERSION=0.4.0
 # The directory to run voila from.
diff --git a/compose.basicauth.yml b/compose.basicauth.yml
new file mode 100644
index 0000000..a276980
--- /dev/null
+++ b/compose.basicauth.yml
@@ -0,0 +1,9 @@
+---
+version: "3.8"
+services:
+  app:
+    environment:
+      - HTTP_BASIC_AUTH_PASSWORDS
+    deploy:
+      labels:
+        - "traefik.http.middlewares.${STACK_NAME}.basicauth.users=${HTTP_BASIC_AUTH_PASSWORDS}"
diff --git a/compose.sso.yml b/compose.sso.yml
index 385457b..f7dca19 100644
--- a/compose.sso.yml
+++ b/compose.sso.yml
@@ -1,3 +1,4 @@
+---
 version: "3.8"
 services:
   app: