diff --git a/harbor/docker-compose.yml b/harbor/docker-compose.yml
index d55ad7c..f297dfb 100644
--- a/harbor/docker-compose.yml
+++ b/harbor/docker-compose.yml
@@ -17,7 +17,7 @@ services:
       hostname: ${HARBOR_HOSTNAME:-harbor.local}
 
       http:
-        port: ${HARBOR_HTTP_PORT:-8080}
+        port: 8080
 
       harbor_admin_password: ${HARBOR_ADMIN_PASSWORD:-Harbor12345}
 
@@ -69,10 +69,20 @@ services:
       - "${HARBOR_DATA_PATH:-/data/harbor}/config:/etc/harbor"
     networks:
       - harbor
+      - proxy
     depends_on:
       - registry
       - database
       - redis
+    labels:
+      - "traefik.enable=true"
+
+      # Docker Registry API (/v2)
+      - "traefik.http.routers.harbor-registry.rule=Host(`${HARBOR_HOSTNAME}`) && PathPrefix(`/v2/`)"
+      - "traefik.http.routers.harbor-registry.entrypoints=websecure"
+      - "traefik.http.routers.harbor-registry.tls=true"
+      - "traefik.http.routers.harbor-registry.tls.certresolver=le"
+      - "traefik.http.services.harbor-registry.loadbalancer.server.port=8080"
 
   portal:
     image: goharbor/harbor-portal:${HARBOR_VERSION:-v2.11.0}
@@ -85,11 +95,13 @@ services:
       - core
     labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.harbor.entrypoints=websecure"
-      - "traefik.http.routers.harbor.rule=Host(`${HARBOR_HOSTNAME}`)"
-      - "traefik.http.routers.harbor.tls=true"
-      - "traefik.http.routers.harbor.tls.certresolver=le"
-      - "traefik.http.services.harbor.loadbalancer.server.port=${HARBOR_HTTP_PORT:-8080}"
+
+      # Harbor UI
+      - "traefik.http.routers.harbor-ui.rule=Host(`${HARBOR_HOSTNAME}`)"
+      - "traefik.http.routers.harbor-ui.entrypoints=websecure"
+      - "traefik.http.routers.harbor-ui.tls=true"
+      - "traefik.http.routers.harbor-ui.tls.certresolver=le"
+      - "traefik.http.services.harbor-ui.loadbalancer.server.port=8080"
 
   jobservice:
     image: goharbor/harbor-jobservice:${HARBOR_VERSION:-v2.11.0}