diff --git a/compose.yaml b/compose.yaml
index 359d716..1be5d39 100644
--- a/compose.yaml
+++ b/compose.yaml
@@ -1,9 +1,6 @@
 services:
   traefik:
     image: traefik:v2.11
-    #container_name: traefik
-    deploy:
-      restart: unless-stopped
 
     command:
       # Providers
@@ -29,13 +26,20 @@ services:
       - "443:443"
 
     volumes:
-      - "/var/run/docker.sock:/var/run/docker.sock:ro"
-      - "./letsencrypt:/letsencrypt"
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+      - ./letsencrypt:/letsencrypt
+
+    deploy:
+      mode: replicated
+      replicas: 1
+      restart_policy:
+        condition: any
+      placement:
+        constraints:
+          - node.role == manager
 
     labels:
       - "traefik.enable=true"
-
-      # Dashboard route (secure this in real setups!)
       - "traefik.http.routers.traefik.rule=Host(`traefik.example.com`)"
       - "traefik.http.routers.traefik.entrypoints=websecure"
       - "traefik.http.routers.traefik.tls.certresolver=le"