diff --git a/opt/00-infrastructure/blackbox/docker-compose.yml b/opt/00-infrastructure/blackbox/docker-compose.yml
index fc52b98..aea8f89 100644
--- a/opt/00-infrastructure/blackbox/docker-compose.yml
+++ b/opt/00-infrastructure/blackbox/docker-compose.yml
@@ -6,14 +6,24 @@ services:
     container_name: blackbox-exporter
     restart: unless-stopped
     ports:
-      - "9115:9115"
+      - "127.0.0.1:9115:9115"
     volumes:
       - ./blackbox.yml:/etc/blackbox_exporter/config.yml
     command:
       - '--config.file=/etc/blackbox_exporter/config.yml'
     networks:
       - monitoring_monitoring
+      - traefik-public
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.blackbox.rule=Host(`blackbox.ai-impress.com`)"
+      - "traefik.http.routers.blackbox.entrypoints=websecure"
+      - "traefik.http.routers.blackbox.tls.certresolver=cloudflare"
+      - "traefik.http.routers.blackbox.middlewares=authentik@file"
+      - "traefik.http.services.blackbox.loadbalancer.server.port=9115"
 
 networks:
   monitoring_monitoring:
     external: true
+  traefik-public:
+    external: true
diff --git a/opt/00-infrastructure/loki/docker-compose.yml b/opt/00-infrastructure/loki/docker-compose.yml
index e42d585..e396de2 100644
--- a/opt/00-infrastructure/loki/docker-compose.yml
+++ b/opt/00-infrastructure/loki/docker-compose.yml
@@ -6,13 +6,21 @@ services:
     container_name: loki
     restart: unless-stopped
     ports:
-      - "3100:3100"
+      - "127.0.0.1:3100:3100"
     command: -config.file=/etc/loki/local-config.yaml
     volumes:
       - loki-data:/loki
       - ./loki-config.yaml:/etc/loki/local-config.yaml
     networks:
       - monitoring_monitoring
+      - traefik-public
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.loki.rule=Host(`loki.ai-impress.com`)"
+      - "traefik.http.routers.loki.entrypoints=websecure"
+      - "traefik.http.routers.loki.tls.certresolver=cloudflare"
+      - "traefik.http.routers.loki.middlewares=authentik@file"
+      - "traefik.http.services.loki.loadbalancer.server.port=3100"
 
   promtail:
     image: grafana/promtail:latest
@@ -33,3 +41,5 @@ volumes:
 networks:
   monitoring_monitoring:
     external: true
+  traefik-public:
+    external: true