diff --git a/.dockerignore b/.dockerignore
new file mode 100644
index 0000000..6a5a7e0
--- /dev/null
+++ b/.dockerignore
@@ -0,0 +1,5 @@
+docker-compose.yml
+Dockerfile
+.git
+LICENSE
+README.md
\ No newline at end of file
diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..dd0f731
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,3 @@
+**/.env*
+**/*.secret
+**/*.pw
diff --git a/docker-compose.yaml b/docker-compose.yaml
new file mode 100644
index 0000000..1bb7d04
--- /dev/null
+++ b/docker-compose.yaml
@@ -0,0 +1,63 @@
+services:
+  koha:
+    # image: teogramm/koha:24.11
+    build: .
+    networks:
+      - koha
+      - public # network which connects to the reverse proxy
+    cap_add:
+      - DAC_READ_SEARCH
+      - SYS_NICE
+    env_file: ./.env.prod
+    environment:
+      MYSQL_SERVER: koha-db
+      MYSQL_USER: koha
+      # MYSQL_PASSWORD: # set in .env.prod
+      DB_NAME: koha
+      MEMCACHED_SERVERS: koha-memcached:11211
+      MB_HOST: koha-rabbitmq
+    depends_on:
+      - db
+      - rabbitmq
+      - memcached
+    labels:
+      traefik.http.routers.koha-opac.rule: Host(`koha.techwork.zone`)
+      traefik.http.routers.koha-opac.tls.certresolver: letsencrypt_standalone
+      traefik.http.routers.koha-opac.service: koha-opac-service
+      traefik.http.routers.koha-admin.rule: Host(`admin.koha.techwork.zone`)
+      traefik.http.routers.koha-admin.tls.certresolver: letsencrypt_standalone
+      traefik.http.routers.koha-admin.service: koha-admin-service
+      traefik.http.services.koha-opac-service.load-balancer.server.port: 8080
+      traefik.http.services.koha-admin-service.load-balancer.server.port: 8081
+
+  koha-rabbitmq:
+    image: docker.io/rabbitmq:3
+    volumes:
+      - ./rabbitmq_plugins:/etc/rabbitmq/enabled_plugins
+    networks:
+      - koha
+
+  koha-db:
+    image: docker.io/mariadb:11
+    volumes:
+      - ./mounts/database:/var/lib/mysql
+    env_file: ./.env.prod
+    environment:
+      MARIADB_RANDOM_ROOT_PASSWORD: true
+      MARIADB_DATABASE: koha
+      MARIADB_USER: koha
+      # MARIADB_PASSWORD: # set in .env.prod
+    networks:
+      - koha
+
+  koha-memcached:
+    image: docker.io/memcached
+    networks:
+      - koha
+
+volumes:
+  mariadb-koha:
+
+networks:
+  koha:
+    internal: true
diff --git a/rabbitmq_plugins b/rabbitmq_plugins
new file mode 100644
index 0000000..17b6ee0
--- /dev/null
+++ b/rabbitmq_plugins
@@ -0,0 +1 @@
+[rabbitmq_stomp].