diff --git a/readme.md b/readme.md
index d42cdaa..0ca16db 100644
--- a/readme.md
+++ b/readme.md
@@ -154,10 +154,27 @@ services:
     # ... existing configuration ...
     labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.fitness.rule=Host(`fitness.yourdomain.com`)"
-      - "traefik.http.routers.fitness.entrypoints=websecure"
+
+      # Public domain
+      - "traefik.http.routers.fitness.rule=Host(`fitness.domain.com`)"
+
+      # Listen on HTTP & HTTPS
+      - "traefik.http.routers.fitness.entrypoints=web,websecure"
+
+      # Force HTTPS using your GLOBAL redirect middleware
+      - "traefik.http.routers.fitness.middlewares=redirect-to-https, fitness-auth"
+
+      # TLS + Let's Encrypt
+      - "traefik.http.routers.fitness.tls=true"
       - "traefik.http.routers.fitness.tls.certresolver=letsencrypt"
+
+      # App internal port
       - "traefik.http.services.fitness.loadbalancer.server.port=8080"
+
+     # - "traefik.http.routers.traefik.middlewares=fitness-auth"
+      #- "traefik.http.middlewares.traefik-auth.basicauth.users=admin:$$apr1$$8EVjn/nj$$GiLUZqcbueTFeD23SuB6x0"  # admin:admin123
+      #- "traefik.http.middlewares.traefik-auth.basicauth.users=admin:$apr1$yGKxPD8U$z4eeZaKNzoASEpr2yh4wQ"  # admin:admin123
+      - "traefik.http.middlewares.fitness-auth.basicauth.users=Dejan:$$apr1$$F5Y8CeQ1$$C2jX95nwyeJAjhtGxvnOJ/"  # admin:admin123
     networks:
       - traefik_default