diff --git a/services/caddy/Caddyfile b/services/caddy/Caddyfile
index 599de4b..994cb29 100644
--- a/services/caddy/Caddyfile
+++ b/services/caddy/Caddyfile
@@ -13,3 +13,6 @@ https://remnawave.lan {
   tls internal
   reverse_proxy 127.0.0.1:4000
 }
+http://cyberchef.lan {
+  reverse_proxy 127.0.0.1:8085
+}
diff --git a/services/cyberchef/docker-compose.yml b/services/cyberchef/docker-compose.yml
new file mode 100644
index 0000000..ac1be42
--- /dev/null
+++ b/services/cyberchef/docker-compose.yml
@@ -0,0 +1,8 @@
+services:
+  cyberchef:
+    image: ghcr.io/gchq/cyberchef:latest
+    container_name: cyberchef
+    restart: unless-stopped
+
+    ports:
+      - "127.0.0.1:8085:80"