diff --git a/.env.default b/.env.default
index f3a82a3..3a6d3f6 100644
--- a/.env.default
+++ b/.env.default
@@ -17,8 +17,8 @@ WALLABAG_URL=http://localhost
 NTFY_URL=http://localhost:8017
 NTFY_BEHIND_PROXY=true
 
-# maintenant
-MAINTENANT_URL=http://localhost
+# TUGTAINER
+TUGTAINER_AGENT_SECRET=CHANGE_ME!
 
 # seafile
 HOST_SEAFILE=seafile
diff --git a/00-monitor/docker-compose.monitor.yml b/00-monitor/docker-compose.monitor.yml
deleted file mode 100644
index 8326eae..0000000
--- a/00-monitor/docker-compose.monitor.yml
+++ /dev/null
@@ -1,18 +0,0 @@
-services:
-  maintenant:
-    container_name: maintenant
-    image: ghcr.io/kolapsis/maintenant:latest
-    ports:
-      - "8000:8000"
-    volumes:
-      - /var/run/docker.sock:/var/run/docker.sock:ro
-      - /proc:/host/proc:ro
-      - maintenant-data:/data
-    environment:
-      MAINTENANT_ADDR: "0.0.0.0:8000"
-      MAINTENANT_DB: "/data/maintenant.db"
-      MAINTENANT_BASE_URL: "${MAINTENANT_URL}"
-    restart: unless-stopped
-
-volumes:
-  maintenant-data:
\ No newline at end of file
diff --git a/00-tugtainer/docker-compose.tugtainer.yml b/00-tugtainer/docker-compose.tugtainer.yml
new file mode 100644
index 0000000..5acdc5c
--- /dev/null
+++ b/00-tugtainer/docker-compose.tugtainer.yml
@@ -0,0 +1,55 @@
+networks:
+  tugtainer_agent:
+    driver: bridge
+services:
+  # Socket proxy is used by default,
+  # but you can mount docker socket directly
+  # and remove this service and DOCKER_HOST variable
+  socket-proxy:
+    image: lscr.io/linuxserver/socket-proxy:latest
+    container_name: socket-proxy
+    environment:
+      CONTAINERS: 1
+      EVENTS: 1
+      IMAGES: 1
+      INFO: 1
+      LOG_LEVEL: warning
+      PING: 1
+      NETWORKS: 1
+      POST: 1
+      TZ: Europe/Moscow
+      VERSION: 1
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+    restart: unless-stopped
+    read_only: true
+    tmpfs:
+      - /run
+    networks:
+      - tugtainer_agent
+    labels:
+      dev.quenary.tugtainer.protected: True
+  agent:
+    depends_on:
+      - socket-proxy
+    container_name: tugtainer-agent
+    image: ghcr.io/quenary/tugtainer-agent:1
+    # volumes:
+      # You can uncomment this to mount socket directly,
+      # and remove socket-proxy service and DOCKER_HOST variable
+      # - /var/run/docker.sock:/var/run/docker.sock:ro
+    restart: unless-stopped
+    environment:
+      # The list of available variables is in env.example
+      AGENT_SECRET: CHANGE_ME!
+      DOCKER_HOST: tcp://socket-proxy:2375
+    read_only: true
+    tmpfs:
+      - /run
+    networks:
+      - tugtainer_agent
+    ports:
+      - '9413:8001'
+    labels:
+      dev.quenary.tugtainer.protected: True
+