diff --git a/portainer/deploy.sh b/portainer/deploy.sh
new file mode 100644
index 0000000..fba60fa
--- /dev/null
+++ b/portainer/deploy.sh
@@ -0,0 +1,7 @@
+#!/usr/bin/env bash
+export DOMAIN=portainer.swarm.thejimnicholson.com
+export NODE_ID=$(docker info -f '{{.Swarm.NodeID}}')
+docker node update --label-add portainer.portainer-data=true $NODE_ID
+docker stack deploy -c portainer.yml portainer
+docker stack ps portainer
+docker service logs portainer_portainer
diff --git a/portainer.yaml b/portainer/portainer.yml
similarity index 69%
rename from portainer.yaml
rename to portainer/portainer.yml
index e8a3a30..45f9e3e 100644
--- a/portainer.yaml
+++ b/portainer/portainer.yml
@@ -17,7 +17,7 @@ services:
           - node.platform.os == linux
 
   portainer:
-    image: portainer/portainer-ce:2.9.3
+    image: portainer/portainer
     command: -H tcp://tasks.agent:9001 --tlsskipverify
     volumes:
       - portainer-data:/data
@@ -33,8 +33,13 @@ services:
         - traefik.enable=true
         - traefik.docker.network=traefik-public
         - traefik.constraint-label=traefik-public
-        - traefik.http.routers.portainer-http.rule=Host(`portainer.home.thejimnicholson.com`)
+        - traefik.http.routers.portainer-http.rule=Host(`${DOMAIN?Variable not set}`)
         - traefik.http.routers.portainer-http.entrypoints=http
+        - traefik.http.routers.portainer-http.middlewares=https-redirect
+        - traefik.http.routers.portainer-https.rule=Host(`${DOMAIN?Variable not set}`)
+        - traefik.http.routers.portainer-https.entrypoints=https
+        - traefik.http.routers.portainer-https.tls=true
+        - traefik.http.routers.portainer-https.tls.certresolver=le
         - traefik.http.services.portainer.loadbalancer.server.port=9000
 
 networks: