diff --git a/caddy/Caddyfile b/caddy/Caddyfile
new file mode 100644
index 0000000..5927ca8
--- /dev/null
+++ b/caddy/Caddyfile
@@ -0,0 +1,8 @@
+:20080 {
+    redirect https://{host}{uri}:20443
+}
+
+:20443 {
+    tls internal
+    reverse_proxy grafana:3000
+}
diff --git a/docker-compose.yaml b/docker-compose.yaml
index e2eee91..886cecb 100644
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -13,7 +13,7 @@ services:
         soft: 262144
         hard: 262144
     ports:
-      - 9000:9000
+      - 127.0.0.1:9000:9000
     restart: unless-stopped
 
   otel-collector-esxi:
@@ -35,8 +35,15 @@ services:
     image: grafana/grafana-enterprise:latest
     volumes:
       - grafana-data:/var/lib/grafana
+    restart: unless-stopped
+
+  caddy:
+    image: caddy:latest
+    volumes:
+      - ./caddy/Caddyfile:/etc/caddy/Caddyfile
     ports:
-      - 23000:3000
+      - 20080:20080
+      - 20443:20443
     restart: unless-stopped
 
 volumes: