diff --git a/docker-compose.yml b/docker-compose.yml
index e33cbd0..3d366d3 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -84,8 +84,42 @@ services:
       - "traefik.http.routers.keycloak.tls.certresolver=letsencrypt"
       - "traefik.http.services.keycloak.loadbalancer.server.port=8080"
 
+  sonarqube-db:
+    image: postgres:15
+    container_name: sonarqube-db
+    environment:
+      POSTGRES_USER: sonar
+      POSTGRES_PASSWORD: sonar
+      POSTGRES_DB: sonarqube
+    volumes:
+      - sonarqube_db_data:/var/lib/postgresql/data
+
+  sonarqube:
+    image: sonarqube:community
+    container_name: sonarqube
+    depends_on:
+      - sonarqube-db
+    environment:
+      SONAR_JDBC_URL: jdbc:postgresql://sonarqube-db:5432/sonarqube
+      SONAR_JDBC_USERNAME: sonar
+      SONAR_JDBC_PASSWORD: sonar
+    volumes:
+      - sonarqube_data:/opt/sonarqube/data
+      - sonarqube_logs:/opt/sonarqube/logs
+      - ./sonarqube/extensions:/opt/sonarqube/extensions
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.sonarqube.rule=Host(`sonarqube.mota-thomas.com`)"
+      - "traefik.http.routers.sonarqube.entrypoints=websecure"
+      - "traefik.http.routers.sonarqube.tls.certresolver=letsencrypt"
+      - "traefik.http.services.sonarqube.loadbalancer.server.port=9000"
+
 volumes:
   gitea_db_data:
   gitea_data:
   keycloak_db_data:
   traefik_letsencrypt:
+  sonarqube_db_data:
+  sonarqube_data:
+  sonarqube_logs:
+  sonarqube_extensions:
diff --git a/sonarqube/extensions/plugins/sonar-auth-oidc-plugin-3.0.0.jar b/sonarqube/extensions/plugins/sonar-auth-oidc-plugin-3.0.0.jar
new file mode 100644
index 0000000..00bf7c4
Binary files /dev/null and b/sonarqube/extensions/plugins/sonar-auth-oidc-plugin-3.0.0.jar differ