diff --git a/services/reverse-proxy/configs/traefik.yml b/services/reverse-proxy/configs/traefik.yml
index 4e8710d..7747b94 100644
--- a/services/reverse-proxy/configs/traefik.yml
+++ b/services/reverse-proxy/configs/traefik.yml
@@ -27,6 +27,8 @@ entryPoints:
       tls: {}
       middlewares:
         - hsts@file
+  ssh:
+    address: :22
 
 global:
   sendAnonymousUsage: false
diff --git a/services/ssh-protection/docker-compose.yml b/services/ssh-protection/docker-compose.yml
new file mode 100644
index 0000000..be4d927
--- /dev/null
+++ b/services/ssh-protection/docker-compose.yml
@@ -0,0 +1,16 @@
+name: SSH Protection
+
+services:
+  endlessh:
+    hostname: endlessh
+    image: linuxserver/endlessh
+    environment:
+      PUID: ${NASCOMPOSE_UID?}
+      PGID: ${NASCOMPOSE_GID?}
+    networks:
+      - reverse-proxy
+    restart: unless-stopped
+    labels:
+      traefik.enable: true
+      traefik.tcp.routers.endlessh.entryPoints: ssh
+      traefik.tcp.services.endlessh.loadbalancer.server.port: 2222