diff --git a/.env.sample b/.env.sample
index bbadded..388b517 100644
--- a/.env.sample
+++ b/.env.sample
@@ -51,3 +51,6 @@ LOG_LEVEL=WARN
 
 ## Host-mode networking
 #COMPOSE_FILE="compose.yml:compose.host.yml"
+
+## "Headless mode" (no domain configured)
+#COMPOSE_FILE="compose.yml:compose.headless.yml"
diff --git a/compose.headless.yml b/compose.headless.yml
new file mode 100644
index 0000000..0ccb9bc
--- /dev/null
+++ b/compose.headless.yml
@@ -0,0 +1,14 @@
+---
+version: "3.8"
+
+services:
+  app:
+    deploy:
+      update_config:
+        failure_action: rollback
+        order: start-first
+      labels:
+        - "traefik.enable=true"
+        - "traefik.http.services.traefik.loadbalancer.server.port=web"
+        - "traefik.http.routers.traefik.entrypoints=web-secure"
+        - "traefik.http.routers.traefik.service=api@internal"