diff --git a/compose/traefik/traefik.yml b/compose/traefik/traefik.yml
index 3d82a68..9750d14 100644
--- a/compose/traefik/traefik.yml
+++ b/compose/traefik/traefik.yml
@@ -58,7 +58,17 @@ http:
         # https://docs.traefik.io/master/routing/routers/#certresolver
         certResolver: letsencrypt
 
-    web-secure-router:
+    heynote-router:
+      rule: "Host(`note.furyhawk.lol`)"
+      entryPoints:
+        - web-secure
+      middlewares:
+        - csrf
+      service: heynote_server
+      tls:
+        certResolver: letsencrypt
+
+    bai-router:
       rule: "Host(`bai.furyhawk.lol`)"
       entryPoints:
         - web-secure
@@ -177,6 +187,10 @@ http:
       loadBalancer:
         servers:
           - url: http://flarum-web:80
+    heynote_server:
+      loadBalancer:
+        servers:
+          - url: http://heynote_app:5173
     streamlit_bai_app:
       loadBalancer:
         servers:
diff --git a/production.yml b/production.yml
index 70beb71..bf19e3e 100644
--- a/production.yml
+++ b/production.yml
@@ -34,6 +34,16 @@ services:
       - net
       - default
 
+  heynote-app:
+    image: furyhawk/heynote:${HEYNOTETAG:-latest}
+    container_name: heynote_app
+    restart: unless-stopped
+    expose:
+      - 5173
+    networks:
+      - net
+      - default
+
   streamlit-bai:
     environment:
       <<: *default-environment