diff --git a/deploy/.env.example b/deploy/.env.example
new file mode 100644
index 0000000..08d2a89
--- /dev/null
+++ b/deploy/.env.example
@@ -0,0 +1,9 @@
+NETBIRD_API_URL=https://netbird.example.com/api
+NETBIRD_API_TOKEN=
+GITEA_URL=https://gitea.example.com
+GITEA_TOKEN=
+GITEA_REPO=BlastPilot/netbird-gitops
+RECONCILER_TOKEN=
+POLL_INTERVAL_SECONDS=30
+PORT=8080
+DATA_DIR=/data
diff --git a/deploy/docker-compose.yml b/deploy/docker-compose.yml
new file mode 100644
index 0000000..ab2e9b6
--- /dev/null
+++ b/deploy/docker-compose.yml
@@ -0,0 +1,21 @@
+services:
+  netbird-reconciler:
+    image: gitea.internal/blastpilot/netbird-reconciler:latest
+    restart: unless-stopped
+    env_file: .env
+    volumes:
+      - reconciler-data:/data
+    ports:
+      - "127.0.0.1:8080:8080"
+    healthcheck:
+      test: ["CMD", "wget", "-q", "--spider", "http://localhost:8080/health"]
+      interval: 30s
+      timeout: 5s
+      retries: 3
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.reconciler.rule=Host(`reconciler.internal`)"
+      - "traefik.http.services.reconciler.loadbalancer.server.port=8080"
+
+volumes:
+  reconciler-data: