diff --git a/docker-compose.yml b/docker-compose.yml
new file mode 100644
index 0000000..1ae9a29
--- /dev/null
+++ b/docker-compose.yml
@@ -0,0 +1,50 @@
+version: "3.8"
+
+services:
+
+  mongo:
+    image: mongo
+    restart: always
+    environment:
+      MONGO_INITDB_ROOT_USERNAME: root
+      MONGO_INITDB_ROOT_PASSWORD_FILE: /run/secrets/mongo_root_password
+    secrets:
+      - mongo_root_password
+
+  vpn:
+    build:
+      context: ./submodules/vpn
+    cap_add:
+      - net_admin
+    command:
+      - '-f ""'
+    environment:
+      TZ: "CST6CDT"
+    links:
+      - "mongo" # for the torrent client
+    networks:
+      - default
+    read_only: true
+    tmpfs:
+      - /run
+      - /tmp
+    restart: unless-stopped
+    secrets:
+      - vpn_auth
+    security_opt:
+      - label:disable
+    stdin_open: true
+    tty: true
+    volumes:
+      - /dev/net:/dev/net:z
+      - ./.volumes/vpn:/vpn
+
+secrets:
+  mongo_root_password:
+    file: ./.secrets/mongo_root_password
+  vpn_auth:
+    file: ./.secrets/vpn_auth
+
+volumes:
+  mongo:
+  var: