diff --git a/compose.yml b/compose.yml
index 06c50f0..4bbc6d0 100644
--- a/compose.yml
+++ b/compose.yml
@@ -29,6 +29,17 @@ services:
       nofile:
         soft: 1000000
         hard: 1048576
+    networks:
+      - proxy
+    deploy:
+      labels:
+        - "traefik.enable=true"
+        - "traefik.docker.network=proxy"
+        - "traefik.http.services.${STACK_NAME}.loadbalancer.server.port=443"
+        - "traefik.http.routers.${STACK_NAME}.rule=Host(`${DOMAIN}`${EXTRA_DOMAINS})"
+        - "traefik.http.routers.${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}"
+        - "traefik.http.routers.${STACK_NAME}.entrypoints=web-secure"
+        - "coop-cloud.${STACK_NAME}.version=1.0.0+9.4-0+17.2+4.0.6"
 
   database:
     image: "zulip/zulip-postgresql:17.2"
@@ -77,9 +88,11 @@ services:
     environment:
       SASL_CONF_PATH: "/home/memcache/memcached.conf"
       MEMCACHED_SASL_PWDB: "/home/memcache/memcached-sasl-db"
+    networks:
+      - internal
 
   rabbitmq:
-    image: "rabbitmq:3.12.14"
+    image: "rabbitmq:4.0.6"
     environment:
       RABBITMQ_DEFAULT_USER: "zulip"
       RABBITMQ_DEFAULT_PASS_FILE: "/run/secrets/rabbitmq_password"
@@ -96,6 +109,8 @@ services:
       interval: 10s
       timeout: 5s
       retries: 3
+    networks:
+      - internal
 
   redis:
     image: "redis:alpine"
@@ -114,6 +129,8 @@ services:
         exec redis-server /etc/redis.conf
     volumes:
       - "redis:/data:rw"
+    networks:
+      - internal
 
 secrets:
   db_password: