diff --git a/services/leantime.hcl b/services/leantime.hcl
new file mode 100644
index 0000000..164ce2e
--- /dev/null
+++ b/services/leantime.hcl
@@ -0,0 +1,50 @@
+job "leantime" {
+  datacenters = ["alo"]
+
+  group "web" {
+    network {
+      port "http" {
+        to = 80
+      }
+    }
+
+    task "server" {
+      driver = "docker"
+
+      config {
+        image = "leantime/leantime:latest"
+        ports = ["http"]
+        volumes = [
+          "/data/compute/appdata/leantime:/var/www/html/userfiles",
+        ]
+      }
+
+      env {
+        LEAN_DEFAULT_TIMEZONE = "Europe/Lisbon"
+        LEAN_DB_HOST = "mysql.service.consul"
+        LEAN_DB_USER = "leantime"
+        LEAN_DB_PASSWORD = "Xuphaedoo9kuaseeQuei"
+        LEAN_DB_DATABASE = "leantime"
+        LEAN_EMAIL_RETURN = "leantime@paler.net"
+        LEAN_APP_URL = "https://leantime.v.paler.net"
+        LEAN_EMAIL_SMTP_HOSTS = "192.168.1.1"
+        LEAN_EMAIL_SMTP_AUTH = "false"
+        LEAN_OIDC_ENABLE = "true"
+        LEAN_OIDC_PROVIDER_URL = "https://authentik.v.paler.net/application/o/leantime/"
+        LEAN_OIDC_CLIENT_ID = "nWqJu9g4avhdpmUzqqvjsExCA1Jrick7GSMd0D6u"
+        LEAN_OIDC_CLIENT_SECRET = "VvPQi5q3kkVTCwN8QWwwPTCqjWc9VbRanCFxa0zB2mhr1ZPxUYXP7Ygg6naMInE4P5vyqJd5w8XiWkuecW14G4KxgXpFtWChKnCOOpe47gjZGNbkYIEDZUmkUB99Saxx"
+      }
+
+      service {
+        name = "leantime"
+        port = "http"
+
+        tags = [
+          "traefik.enable=true",
+          "traefik.http.routers.leantime.entryPoints=websecure",
+          "traefik.http.routers.leantime.middlewares=authentik@file",
+        ]
+      }
+    }
+  }
+}