diff --git a/new-build/portainer/docker-compose.yml b/new-build/portainer/docker-compose.yml
new file mode 100644
index 0000000..e1eb285
--- /dev/null
+++ b/new-build/portainer/docker-compose.yml
@@ -0,0 +1,35 @@
+version: '3.8'
+
+services:
+  portainer:
+    image: portainer/portainer-ce:latest
+    container_name: portainer
+    restart: always
+    ports:
+      - "8000:8000"   # Edge agent port
+      - "9000:9000"   # HTTP web UI
+      - "9443:9443"   # HTTPS web UI (optional)
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+      - portainer_data:/data
+    environment:
+      - TZ=America/New_York
+    networks:
+      - portainer_net
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.portainer.rule=Host(`portainer.nb.bobbysh.me`)"
+      - "traefik.http.routers.portainer.entrypoints=websecure"
+      - "traefik.http.routers.portainer.tls=true"
+      - "traefik.http.services.portainer.loadbalancer.server.port=9000"
+      # Optional: disable Traefik if not using it yet
+      # - "traefik.enable=false"
+
+volumes:
+  portainer_data:
+    driver: local
+
+networks:
+  portainer_net:
+    driver: bridge
+    attachable: true