diff --git a/example.env b/.env.example
similarity index 87%
rename from example.env
rename to .env.example
index 4e2ae52..19c20bf 100644
--- a/example.env
+++ b/.env.example
@@ -16,3 +16,8 @@ PREAUTH_ID_NAME='Session ID'
 PREAUTH_TOKEN_NAME='Authentication Token'
 PREAUTH_SUBMIT_NAME='Submit'
 
+# who owns the session files
+# permissions of the volumn must match
+USER_ID=1000
+GROUP_ID=1000
+
diff --git a/compose.yaml b/compose.yaml
new file mode 100644
index 0000000..4771977
--- /dev/null
+++ b/compose.yaml
@@ -0,0 +1,19 @@
+services:
+  preauth:
+    env_file:
+      # TODO rename ".env.example" to just ".env"
+      # edit USER_ID and GROUP_ID if needed
+      # set PREAUTH_KEY and PREAUTH_TOKEN after initial start to persist those settings
+      - .env
+    expose:
+      - 9000
+    image: digitaladapt/preauth
+    init: true
+    restart: unless-stopped
+    user: ${USER_ID}:${GROUP_ID}
+    volumes:
+      - preauth-sessions:/tmp/sessions
+
+volumes:
+  preauth-sessions:
+