diff --git a/Security_Containers/docker-socket-proxy/compose.yaml b/Security_Containers/docker-socket-proxy/compose.yaml
new file mode 100644
index 0000000..9c14110
--- /dev/null
+++ b/Security_Containers/docker-socket-proxy/compose.yaml
@@ -0,0 +1,28 @@
+services:
+  socket-proxy:
+    image: tecnativa/docker-socket-proxy:latest
+    container_name: socket-proxy
+    restart: unless-stopped
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+    environment:
+      CONTAINERS: 1   # Traefik needs this
+      SERVICES: 0
+      TASKS: 0
+      NETWORKS: 0
+      NODES: 0
+      BUILD: 0
+      COMMIT: 0
+      CONFIGS: 0
+      DISTRIBUTION: 0
+      EXEC: 0
+      IMAGES: 0
+      INFO: 0
+      PLUGINS: 0
+      POST: 0
+      SECRETS: 0
+      SWARM: 0
+      SYSTEM: 0
+      VOLUMES: 0
+    networks:
+      - socket_proxy  # isolated network, NOT traefik_network
\ No newline at end of file