diff --git a/docker-compose.yml b/docker-compose.yml
index 6893271..a55b9e9 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -208,7 +208,53 @@ services:
       - "traefik.http.routers.forgejo_app.tls.certresolver=myresolver"
       - "traefik.http.routers.forgejo_app.middlewares=forgejo_app_strip"
       - "traefik.http.middlewares.forgejo_app_strip.stripprefix.prefixes=/forge"
-      - "traefik.http.services.forgejo_app.loadbalancer.server.port=3000"
+      - "traefik.http.services.forgejo-app.loadbalancer.server.port=3000"
+
+  prometheus:
+    image: prom/prometheus
+    container_name: "prometheus"
+    restart: unless-stopped
+    command:
+      - '--web.external-url=/prometheus/'
+      - '--web.route-prefix=/prometheus/'
+      - '--storage.tsdb.path=/prometheus/tsdb'
+    volumes:
+      - ./prometheus:/prometheus
+      - /etc/timezone:/etc/timezone:ro
+      - /etc/localtime:/etc/localtime:ro
+    environment:
+      - PUID=1000
+      - PGID=1000
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.prometheus_app.rule=Host(`oxmox.root.sx`) && PathPrefix(`/prometheus`)"
+      - "traefik.http.routers.prometheus_app.entrypoints=websecure"
+      - "traefik.http.routers.prometheus_app.tls.certresolver=myresolver"
+      - "traefik.http.routers.prometheus_app.middlewares=traefik_api_auth"
+      - "traefik.http.services.prometheus_app.loadbalancer.server.port=9090"
+
+  grafana:
+    image: grafana/grafana
+    container_name: "grafana"
+    restart: unless-stopped
+    depends_on:
+      - prometheus
+    volumes:
+      - ./grafana/data:/var/lib/grafana
+      - ./grafana/etc:/etc/grafana
+    environment:
+      - PUID=1000
+      - PGID=1000
+      #- GF_SECURITY_DISABLE_INITIAL_ADMIN_CREATION=true
+      - GF_INSTALL_PLUGINS=grafana-piechart-panel
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.grafana_app.rule=Host(`oxmox.root.sx`) && PathPrefix(`/grafana`)"
+      - "traefik.http.routers.grafana_app.entrypoints=websecure"
+      - "traefik.http.routers.grafana_app.tls.certresolver=myresolver"
+      - "traefik.http.routers.grafana_app.middlewares=traefik_api_auth,grafana_app_strip"
+      - "traefik.http.middlewares.grafana_app_strip.stripprefix.prefixes=/grafana"
+      - "traefik.http.services.grafana_app.loadbalancer.server.port=3000"
 
   #wireguard:
   #  image: lscr.io/linuxserver/wireguard:latest