diff --git a/docker-compose.yml b/docker-compose.yml
index 2c0c8cb..de9eda5 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -37,6 +37,7 @@ include:
 
   - path:
       - ${SERVICE_PATH}/gitea/gitea.yml
+      - ${SERVICE_PATH}/home-assistant/home-assistant.yml
       - ${SERVICE_PATH}/it-tools/it-tools.yml
       - ${SERVICE_PATH}/mealie/mealie.yml
       - ${SERVICE_PATH}/paperless-ngx/paperless-ngx.yml
diff --git a/project/media/immich/immich.yml b/project/media/immich/immich.yml
index 41841cc..f7aa8ca 100644
--- a/project/media/immich/immich.yml
+++ b/project/media/immich/immich.yml
@@ -13,7 +13,7 @@ services:
       DB_DATABASE_NAME: immich
       REDIS_HOSTNAME: redis
     volumes:
-      - ${IMMICH_EXTERNAL_PATH}:/usr/src/app/external
+      - ${IMMICH_EXTERNAL_PATH}:/usr/src/app/external:ro
       - ${MEDIA_PATH}/immich/data/library:/usr/src/app/upload
       - /etc/localtime:/etc/localtime:ro
     ports:
diff --git a/project/service/home-assistant/home-assistant.yml b/project/service/home-assistant/home-assistant.yml
new file mode 100644
index 0000000..b5aaf24
--- /dev/null
+++ b/project/service/home-assistant/home-assistant.yml
@@ -0,0 +1,21 @@
+services:
+  home-assistant:
+    extends:
+      file: ${TEMPLATES_PATH}
+      service: default
+    image: ghcr.io/home-assistant/home-assistant:stable
+    container_name: home-assistant
+    ports:
+      - 4012:8123
+    volumes:
+      - ${SERVICE_PATH}/home-assistant/config:/config
+      - /etc/localtime:/etc/localtime:ro
+      - /run/dbus:/run/dbus:ro
+    labels:
+      # Watchtower
+      - "com.centurylinklabs.watchtower.enable=true"
+      # Traefik
+      - "traefik.enable=true"
+      - "traefik.http.routers.home-assistant.rule=Host(`ha.${LOCAL_DOMAIN}`)"
+      - "traefik.http.routers.home-assistant.entrypoints=https"
+      - "traefik.http.routers.home-assistant.tls=true"
\ No newline at end of file
diff --git a/project/service/it-tools/it-tools.yml b/project/service/it-tools/it-tools.yml
index f7cd431..464bd0d 100644
--- a/project/service/it-tools/it-tools.yml
+++ b/project/service/it-tools/it-tools.yml
@@ -14,6 +14,4 @@ services:
       - "traefik.enable=true"
       - "traefik.http.routers.it-tools.rule=Host(`it-tools.${LOCAL_DOMAIN}`)"
       - "traefik.http.routers.it-tools.entrypoints=https"
-      - "traefik.http.routers.it-tools.tls=true"
-      # Middlewares
-      - "traefik.http.routers.it-tools.middlewares=crowdsec-bouncer@file"
\ No newline at end of file
+      - "traefik.http.routers.it-tools.tls=true"
\ No newline at end of file