diff --git a/push/docker-compose.yaml b/push/docker-compose.yaml
new file mode 100644
index 0000000..a05e51c
--- /dev/null
+++ b/push/docker-compose.yaml
@@ -0,0 +1,40 @@
+services:
+
+  ntfy:
+    image: binwiederhier/ntfy:${NTFY_VERSION}
+    restart: unless-stopped
+    networks: 
+      - web
+    command:
+      - serve
+    environment:
+      - TZ=UTC
+      - NTFY_BASE_URL=https://push.florianzirker.de
+      - NTFY_LISTEN_HTTP=0.0.0.0:80
+      - NTFY_CACHE_FILE=/var/cache/ntfy/cache.db
+      - NTFY_CACHE_DURATION=24h
+      - NTFY_BEHIND_PROXY=true
+      - NTFY_ATTACHMENT_CACHE_DIR=/var/cache/ntfy/attachments
+      - NTFY_KEEPALIVE_INTERVAL=45s
+      - NTFY_AUTH_DEFAULT_ACCESS=deny-all
+      - NTFY_AUTH_FILE=/var/lib/ntfy/user.db
+      - NTFY_ENABLE_SIGNUP=false
+      - NTFY_ENABLE_LOGIN=true
+      - NTFY_ENABLE_RESERVATIONS=false
+    volumes:
+      - ${VOLUMES_PATH}/push/ntfy/cache/:/var/cache/ntfy
+      - ${VOLUMES_PATH}/push/ntfy/varlib/:/var/lib/ntfy/
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.push.rule=Host(`push.${DOMAIN}`)"
+      - "traefik.http.routers.push.entrypoints=websecure"
+      - "traefik.http.routers.push.tls.certresolver=netcup"
+      - "traefik.http.routers.push.tls.options=intermediate@file"
+      - "traefik.http.services.push.loadbalancer.server.port=80"
+      - "docker.group=push"
+
+networks:
+  push:
+  web:
+    external: true
+
diff --git a/start-all.sh b/start-all.sh
index 666d0fe..06d3050 100755
--- a/start-all.sh
+++ b/start-all.sh
@@ -12,3 +12,4 @@ up gitea;
 up wallabag;
 up www;
 up firefoxsync;
+up push;