diff --git a/grafana/.env.example b/grafana/.env.example
new file mode 100644
index 0000000..b0acece
--- /dev/null
+++ b/grafana/.env.example
@@ -0,0 +1 @@
+# https://grafana.com/docs/grafana/latest/setup-grafana/configure-grafana/#override-configuration-with-environment-variables
diff --git a/grafana/compose.yml b/grafana/compose.yml
new file mode 100644
index 0000000..2623b27
--- /dev/null
+++ b/grafana/compose.yml
@@ -0,0 +1,26 @@
+services:
+  grafana:
+    container_name: grafana
+    image: grafana/grafana
+    user: 0:0 # Rootless Podman
+    env_file: .env
+    restart: unless-stopped
+    volumes:
+      - ./appdata:/var/lib/grafana
+    networks:
+      - dmz
+      - monitoring
+    labels:
+      # Caddy
+      caddy: "*.{$$INT_DOMAIN}"
+      caddy.1_@grafana: host grafana.{$$INT_DOMAIN}
+      caddy.1_handle: "@grafana"
+      caddy.1_handle.reverse_proxy: "{{upstreams 3000}}"
+      # Diun
+      diun.enable: true
+
+networks:
+  dmz:
+    external: true
+  monitoring:
+    external: true
\ No newline at end of file