diff --git a/.env.example b/.env.example
new file mode 100644
index 0000000..a8bcdfb
--- /dev/null
+++ b/.env.example
@@ -0,0 +1,4 @@
+LARGE_STORAGE_DIR=
+
+USER=
+GROUP=
diff --git a/compose.yml b/compose.yml
index 381567a..c368640 100644
--- a/compose.yml
+++ b/compose.yml
@@ -24,7 +24,7 @@ services:
     container_name: node-exporter
     image: quay.io/prometheus/node-exporter:latest
     restart: always
-    command: 
+    command:
       - --path.rootfs=/host
     pid: host
     volumes:
@@ -39,9 +39,11 @@ services:
     image: gcr.io/cadvisor/cadvisor:latest
     restart: always
     command:
-      - --housekeeping_interval=30s 
-      - --disable_metrics=disk,diskIO,network,tcp,udp,percpu,sched,process # lower CPU usage
+      - --housekeeping_interval=30s
+      - --disable_metrics=disk,diskIO,tcp,udp,percpu,sched,process # lower CPU usage
       - --docker_only=true
+    cap_add:
+      - SYS_PTRACE
     devices:
       - /dev/kmsg
     volumes:
@@ -292,6 +294,29 @@ services:
     expose:
       - 3001
 
+  firefly: # Firefly III (tracks finances)
+    container_name: firefly
+    image: fireflyiii/core:latest
+    restart: unless-stopped
+    env_file: ./env/firefly.env
+    networks:
+      - service_network
+      - firefly_network
+    expose:
+      - 8080
+    depends_on:
+      - firefly-db
+
+  firefly-db:
+    container_name: firefly-db
+    image: mariadb:latest
+    restart: always
+    env_file: ./env/firefly-db.env
+    volumes:
+      - ./data/firefly-db:/var/lib/mysql
+    networks:
+      - firefly_network
+
 networks:
   info_network:
     name: info_network
@@ -303,6 +328,8 @@ networks:
     name: photoprism_network
   gitea_network:
     name: gitea_network
+  firefly_network:
+    name: firefly_network
   hidden_network:
     name: hidden_network
     external: true
diff --git a/template.yml b/template.yml
index b841fc9..d8c1a70 100644
--- a/template.yml
+++ b/template.yml
@@ -7,6 +7,7 @@ services:
 		user:
 		env_file:
 		environment:
+                cap_add:
 		deploy:
 		devices:
 		working_dir: