diff --git a/docker-compose.yml b/docker-compose.yml
index 7601766..0653cc2 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -280,12 +280,23 @@ services:
     environment:
       - DNS_SERVER=on
       - DNS_UPSTREAM_RESOLVERS=cloudflare,google,quad9
+      - FIREWALL_OUTBOUND_SUBNETS=192.168.68.0/24
       - VPN_SERVICE_PROVIDER=${VPN_SERVICE_PROVIDER}
       - OPENVPN_USER=${VPN_USER}
       - OPENVPN_PASSWORD=${VPN_PASSWORD}
       - SERVER_COUNTRIES=Switzerland
       - TZ=Europe/Brussels
       - IPV6=off
+    healthcheck:
+      interval: 1m
+      timeout: 10s
+      retries: 3
+      start_period: 30s
+      test:
+        [
+          "CMD-SHELL",
+          "wget -qO- http://127.0.0.1:8000/health | grep -q 'healthy'",
+        ]
     restart: unless-stopped
     labels:
       - com.centurylinklabs.watchtower.enable=true