diff --git a/.streamlit/config.toml b/.streamlit/config.toml
new file mode 100644
index 0000000..619d430
--- /dev/null
+++ b/.streamlit/config.toml
@@ -0,0 +1,6 @@
+[server]
+enableXsrfProtection = false
+enableCORS = false
+
+[browser]
+gatherUsageStats = false
diff --git a/docker-compose.yml b/docker-compose.yml
index bdf469b..8730d5e 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -11,6 +11,7 @@ services:
     volumes:
       - ./notebook_data:/app/data
       - ./surreal_data:/mydata
+      - ./.streamlit/config.toml:/app/.streamlit/config.toml:ro
     labels:
       - "traefik.enable=true"
       - "traefik.docker.network=traefik-public"
@@ -24,6 +25,10 @@ services:
       - "traefik.http.routers.open-notebook-api.entrypoints=web"
       - "traefik.http.routers.open-notebook-api.service=open-notebook-api"
       - "traefik.http.services.open-notebook-api.loadbalancer.server.port=5055"
+      # rnotes.online subdomain alias
+      - "traefik.http.routers.open-notebook-rnotes.rule=Host(`opennotebook.rnotes.online`)"
+      - "traefik.http.routers.open-notebook-rnotes.entrypoints=web"
+      - "traefik.http.routers.open-notebook-rnotes.service=open-notebook"
     networks:
       - traefik-public
       - ai-internal