diff --git a/nextcloud/docker-compose.yml b/nextcloud/docker-compose.yml
new file mode 100644
index 0000000..290d1a6
--- /dev/null
+++ b/nextcloud/docker-compose.yml
@@ -0,0 +1,38 @@
+# https://github.com/nextcloud/all-in-one/tree/main
+# https://github.com/nextcloud/all-in-one/blob/main/reverse-proxy.md#adapting-the-sample-web-server-configurations-below
+# https://raju.dev/nextcloud-aio-install-with-docker-compose-and-reverse-proxy/
+
+services:
+  nextcloud-aio-mastercontainer:
+    image: nextcloud/all-in-one:latest
+    init: true
+    restart: always
+    container_name: nextcloud-aio-mastercontainer
+    volumes:
+      - nextcloud_aio_mastercontainer:/mnt/docker-aio-config
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+    network_mode: bridge
+    ports:
+      - 3010:8080
+    environment:
+      - AIO_DISABLE_BACKUP_SECTION=true
+      - APACHE_PORT=11000
+      - APACHE_IP_BINDING=0.0.0.0
+      - SKIP_DOMAIN_VALIDATION=true
+      # BORG_RETENTION_POLICY: --keep-within=7d --keep-weekly=4 --keep-monthly=6 # Allows to adjust borgs retention policy. See https://github.com/nextcloud/all-in-one#how-to-adjust-borgs-retention-policy
+      - COLLABORA_SECCOMP_DISABLED=false
+      - NEXTCLOUD_DATADIR=/mnt/ncdata
+      - NEXTCLOUD_MOUNT=/mnt/
+      - NEXTCLOUD_UPLOAD_LIMIT=10G
+      - NEXTCLOUD_MAX_TIME=3600
+      - NEXTCLOUD_MEMORY_LIMIT=1024M
+      # NEXTCLOUD_TRUSTED_CACERTS_DIR: /path/to/my/cacerts # CA certificates in this directory will be trusted by the OS of the nexcloud container (Useful e.g. for LDAPS) See See https://github.com/nextcloud/all-in-one#how-to-trust-user-defined-certification-authorities-ca
+      - NEXTCLOUD_STARTUP_APPS=deck twofactor_totp calendar contacts notes bookmarks
+      - NEXTCLOUD_ADDITIONAL_APKS=imagemagick
+      - NEXTCLOUD_ADDITIONAL_PHP_EXTENSIONS=imagick
+      # TALK_PORT=3478
+      # WATCHTOWER_DOCKER_SOCKET_PATH: /var/run/docker.sock # Needs to be specified if the docker socket on the host is not located in the default '/var/run/docker.sock'. Otherwise mastercontainer updates will fail. For macos it needs to be '/var/run/docker.sock'
+
+volumes:
+  nextcloud_aio_mastercontainer:
+    name: nextcloud_aio_mastercontainer # This line is not allowed to be changed as otherwise the built-in backup solution will not work