diff --git a/intern/docker_syslog/tasks/main.yml b/intern/docker_syslog/tasks/main.yml
new file mode 100644
index 0000000000000000000000000000000000000000..38e57a0bf8d8bd82454a1fc32046d49d3ecb3fef
--- /dev/null
+++ b/intern/docker_syslog/tasks/main.yml
@@ -0,0 +1,29 @@
+---
+
+- name: "create folder struct for {{ servicename }}"
+  file: 
+    path: "{{ basedir }}" 
+    state: "directory"
+
+- name: "create folder struct for {{ servicename }}"
+  file: 
+    path: "{{ basedir }}/{{ item }}" 
+    state: "directory"
+    owner: 508
+    group: 508
+  with_items:
+    - "data"
+    - "logs"
+
+- name: "create config files for {{ servicename }}"
+  template: 
+    src: "{{ item }}"
+    dest: "{{ basedir }}/{{ item }}"
+  with_items:
+    - docker-compose.yml 
+
+- name: "start {{ servicename }} docker"
+  docker_compose:
+    project_src: "{{ basedir }}"
+    state: present
+
diff --git a/intern/docker_syslog/templates/docker-compose.yml b/intern/docker_syslog/templates/docker-compose.yml
new file mode 100644
index 0000000000000000000000000000000000000000..99446ca715afc56f5544fbd5659aaeda68865199
--- /dev/null
+++ b/intern/docker_syslog/templates/docker-compose.yml
@@ -0,0 +1,14 @@
+version: "3"
+services:
+  app:
+    image: sebp/elk:8.5.3
+    restart: always
+    ports:
+      - 5044:5044
+    environment:
+      TZ: "Europe/Berlin"
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.{{ servicename }}.rule=Host(`{{ domain }}`)
+      - traefik.http.routers.{{ servicename }}.entrypoints=websecure
+      - traefik.http.services.{{ servicename }}.loadbalancer.server.port=5601