diff --git a/Proxy_Containers/traefik/config.yaml b/Proxy_Containers/traefik/config.yaml
index ea71a42..fdd9664 100644
--- a/Proxy_Containers/traefik/config.yaml
+++ b/Proxy_Containers/traefik/config.yaml
@@ -2,4 +2,14 @@ middlewares:
   crowdsec-bouncer:
       forwardauth:
         address: http://bouncer-traefik:8080/api/v1/forwardAuth
-        trustForwardHeader: true
\ No newline at end of file
+        trustForwardHeader: true
+
+  dashboard-auth:
+    basicAuth:
+      users:
+        - "admin:$apr1$..."  # htpasswd generated
+  internal-only:
+    ipAllowList:
+      sourceRange:
+        - "192.168.0.0/24"  # your LAN
+        - "127.0.0.1/32"
\ No newline at end of file