diff --git a/docker-compose.logging.ops.yml b/docker-compose.logging.ops.yml
index e9e21b55d98a5eda058cdf2a96256572f48ef60e..fd1505cbc55b7690fe3ee03a713e9627888d8600 100644
--- a/docker-compose.logging.ops.yml
+++ b/docker-compose.logging.ops.yml
@@ -22,3 +22,10 @@ services:
     deploy:
       placement:
         constraints: [node.role == manager]
+      labels:
+        # router for basic auth based access (https)
+        - "traefik.http.routers.logging.rule=Host(`kibana.prism.eox.at`)"
+        - "traefik.http.routers.logging.middlewares=apiauth@file,compress@file"
+        - "traefik.http.routers.logging.tls=true"
+        - "traefik.http.routers.logging.tls.certresolver=default"
+        - "traefik.http.routers.logging.entrypoints=https"