diff --git a/compose.yaml b/compose.yaml
index 9ee8b35..dc3f434 100644
--- a/compose.yaml
+++ b/compose.yaml
@@ -1,23 +1,45 @@
 networks:
-  emby_chris_network:
+  emby_sascha_network:
+    enable_ipv6: false
     name: emby_chris_network
 
 services:
+  wireguard:
+    image: lscr.io/linuxserver/wireguard:latest
+    container_name: wireguard
+    cap_add:
+      - NET_ADMIN
+      - SYS_MODULE
+    environment:
+      - PUID=1000
+      - PGID=1000
+      - TZ=Europe/Berlin
+      - LOCAL_NETWORK=10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,172.18.0.0/16
+    volumes:
+      - /app-config/wireguard/:/config
+      - /lib/modules:/lib/modules
+    ports:
+      - 0.0.0.0:8096:8096  # Emby erbt diesen Port über network_mode
+    sysctls:
+      - net.ipv4.conf.all.src_valid_mark=1
+      - net.ipv4.ip_forward=1        # ← NEU: Forwarding im Container
+    networks:
+      - emby_chris_network          # ← NEU: Netzwerk zuweisen
+    restart: unless-stopped
 
-  emby_chris:
+  emby:
     image: lscr.io/linuxserver/emby:latest
-    container_name: emby_chris
+    container_name: emby
     volumes:
       - /app-config/emby:/config
-      - /app-config/backup:/backup
-      - data:/data:ro
-      - chris:/chris
-      - /transcode:/tmp
+      - /app-config/emby_backup:/backup
+      - data:/data
+    tmpfs:
+      - /tmp:size=8G,mode=1777
     environment:
       - TZ=Europe/Berlin
       - PUID=1000
       - PGID=1000
-      - OutputLogsToDocker=1
       - NVIDIA_DRIVER_CAPABILITIES=all
       - NVIDIA_VISIBLE_DEVICES=all
     restart: unless-stopped
@@ -34,10 +56,9 @@ services:
             - driver: nvidia
               count: all
               capabilities: [gpu]
-    ports:
-      - "8096:8096"
-    networks:
-      - emby_chris_network
+    network_mode: "service:wireguard"  # Emby nutzt WireGuard-Netzwerk
+    depends_on:
+      - wireguard                      # ← NEU: Startreihenfolge sichern
 
 volumes:
   data: