diff --git a/infrastructure/docker-compose.yml b/infrastructure/docker-compose.yml
index 14ea5f5..35e9e24 100644
--- a/infrastructure/docker-compose.yml
+++ b/infrastructure/docker-compose.yml
@@ -26,13 +26,8 @@ services:
     image: traefik:v2.10.5
     container_name: traefik
     restart: always
-    ports:
-      # The HTTP port
-      - "8380:80"
-      # The HTTPS port
-      - "8543:443"
-      # SSH port
-      - "2222:222/tcp"
+    # using network mode host allows traefik access to all "docker networks"
+    # otherwise traefik needs to be part of any network defined
     network_mode: host
     volumes:
       - "/var/run/docker.sock:/var/run/docker.sock:ro"
@@ -46,7 +41,8 @@ services:
       - "traefik.http.routers.dashboard.entrypoints=https"
       - "traefik.http.routers.dashboard.service=api@internal"
       - "traefik.http.services.dashboard.loadbalancer.server.port=8080"
-
+      - "traefik.http.middlewares.local-ipwhitelist.ipwhitelist.sourcerange=127.0.0.1/32, 192.168.0.0/16, 172.16.0.0/12"
+      
   smtp:
     image: "maildev/maildev:2.1.0"
     networks:
@@ -177,7 +173,7 @@ services:
       - "traefik.enable=true"
       - "traefik.http.routers.registry.rule=Host(`${REGISTRY_HOST}`)"
       - "traefik.http.routers.registry.tls=true"
-      - "traefik.http.routers.registry.entrypoints=https,http"
+      - "traefik.http.routers.registry.entrypoints=https"
       - "traefik.http.services.registry.loadbalancer.server.port=5000"
   ui:
     image: joxit/docker-registry-ui:latest
@@ -216,6 +212,7 @@ services:
       - "traefik.http.routers.mvn.rule=Host(`${REPOSILITE_HOST}`)"
       - "traefik.http.routers.mvn.entrypoints=http"
       - "traefik.http.services.mvn.loadbalancer.server.port=${REPOSILITE_PORT}"
+
   verdaccio:
     image: verdaccio/verdaccio:5
     container_name: verdaccio