diff --git a/compose.yml b/compose.yml
index ced718e..6b95284 100644
--- a/compose.yml
+++ b/compose.yml
@@ -4,12 +4,13 @@ networks:
     driver: bridge
   backend:
     driver: bridge
-  local:
-    driver: host
 volumes:
   gitea.vol:
   opengist.vol:
   # grocy.vol:
+secrets:
+  generic:
+    file: ./secrets.env
 services:
   gitea:
     image: docker.gitea.com/gitea:latest
@@ -19,7 +20,7 @@ services:
       - USER_GID=$(id -u $USER)
     restart: always
     networks:
-      - gitea
+      - frontend
     volumes:
       - gitea.vol:/data
       - /etc/timezone:/etc/timezone:ro
@@ -27,6 +28,24 @@ services:
     ports:
       - 3000:3000
       - 2222:2222
+  opengist:
+    image: ghcr.io/thomiceli/opengist:latest
+    container_name: opengist
+    restart: unless-stopped
+    ports:
+      - 6157:6157
+      - 2222:2223
+    volumes:
+      - opengist.vol:/opengist
+      - ~/.config/opengist/config.yml:/config.yml"
+    environment:
+      OG_LOG_LEVEL: warn
+      OG_SSH_PORT: 22
+      UID: $(id -u $USER)
+      GID: $(id -u $USER)
+    networks:
+      - frontend
+  # @TODO the below services are in the future meant to be in a LAN homeserver or tailscale/headscale exit node
   grocy:
     image: lscr.io/linuxserver/grocy:latest
     container_name: grocy
@@ -41,17 +60,5 @@ services:
     ports:
       - 9283:9283
     restart: unless-stopped
-  opengist:
-    image: ghcr.io/thomiceli/opengist:latest
-    container_name: opengist
-    restart: unless-stopped
-    ports:
-      - 6157:6157
-      - 2222:2223
-    volumes:
-      - opengist.vol:/opengist
-      - ~/.config/opengist/config.yml:/config.yml"
-    environment:
-      OG_SSH_PORT: 22
-      UID: $(id -u $USER)
-      GID: $(id -u $USER)
\ No newline at end of file
+    networks:
+      - frontend
\ No newline at end of file