diff --git a/ai/compose.yml b/ai/compose.yml
index fceea5b..60b1d2e 100755
--- a/ai/compose.yml
+++ b/ai/compose.yml
@@ -148,11 +148,29 @@ services:
       - /mnt/HoardingCow_docker_data/Honcho/data:/app/data
     networks:
       - ai_backend
+      - ai_net
     depends_on:
       honcho-db:
         condition: service_healthy
       honcho-redis:
         condition: service_healthy
+    labels:
+      - "traefik.enable=true"
+
+      # Router for HTTP + redirect to HTTPS
+      - "traefik.http.routers.honcho-http.rule=Host(`honcho.lazyworkhorse.net`)"
+      - "traefik.http.routers.honcho-http.entrypoints=web"
+      - "traefik.http.routers.honcho-http.middlewares=redirect-to-https"
+
+      # Router for HTTPS with TLS — protected by Authelia
+      - "traefik.http.routers.honcho-https.rule=Host(`honcho.lazyworkhorse.net`)"
+      - "traefik.http.routers.honcho-https.entrypoints=websecure"
+      - "traefik.http.routers.honcho-https.tls=true"
+      - "traefik.http.routers.honcho-https.tls.certresolver=njalla"
+      - "traefik.http.routers.honcho-https.middlewares=hermes-auth"
+
+      # Service Loadbalancer
+      - "traefik.http.services.honcho.loadbalancer.server.port=8000"
 
   honcho-db:
     image: pgvector/pgvector:pg15
diff --git a/ai/hermes/Dockerfile b/ai/hermes/Dockerfile
index e44caa1..fe09d62 100644
--- a/ai/hermes/Dockerfile
+++ b/ai/hermes/Dockerfile
@@ -50,12 +50,6 @@ COPY --chmod=0755 --from=ghcr.io/astral-sh/uv:latest /uv /usr/local/bin/
 
 WORKDIR /opt/hermes
 
-# ---------- Memory provider dependencies ----------
-# httpx: HTTP client for OpenViking plugin
-# honcho-ai: already installed in upstream image (v2.1.1+)
-RUN . /opt/hermes/.venv/bin/activate && \
-    uv pip install --no-cache-dir httpx
-
 # ---------- Piper TTS ----------
 RUN . /opt/hermes/.venv/bin/activate && \
     uv pip install --no-cache-dir piper-tts sounddevice numpy && \