diff --git a/docker-compose.yml b/docker-compose.yml
index 0509531..fbc52b3 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -37,8 +37,7 @@ services:
       - TITLE=$TITLE
       - DESCRIPTION=$DESCRIPTION
       - DRONE_REPO_LINK=$DRONE_REPO_LINK
-      - DRONE_COMMIT=$DRONE_COMMIT
-      
+      - DRONE_COMMIT=$DRONE_COMMIT   
     volumes:
       - letsencrypt-git:/etc/letsencrypt
     networks:
@@ -98,6 +97,7 @@ services:
       - 22:22
     networks:
       - appnet
+      - externalnet
   ngrok:
     # ngrok tunnel client
     deploy:
@@ -147,6 +147,7 @@ services:
       - DRONE_CONVERT_PLUGIN_SECRET=${DRONE_CONVERT_SECRET}
     networks:
       - appnet
+      - externalnet
   drone-docker-runner:
     # drone runner performs builds
     deploy:
@@ -220,6 +221,7 @@ services:
       - REGISTRY_HTTP_ADDR=0.0.0.0:5000
     networks:
       - appnet
+      - externalnet
   registry-cache:
     # registry cache (used?)
     deploy:
@@ -273,6 +275,7 @@ services:
       - database__pool__min=0 # https://github.com/knex/knex/issues/975
     networks:
       - appnet
+      - externalnet
   ghost-mysql:
     image: mysql:5.7
     deploy:
@@ -311,6 +314,7 @@ services:
       COMMENTO_POSTGRES: postgres://${COMMENTO_POSTGRES_USER}:${COMMENTO_POSTGRES_PASSWORD}@commento-postgres:5432/${COMMENTO_POSTGRES_DB}?sslmode=disable
     networks:
       - appnet
+      - externalnet
   commento-postgres:
     deploy:
       placement:
@@ -498,6 +502,7 @@ services:
       - GUACD_HOSTNAME=guacd
     networks:
       - appnet
+      - externalnet
   chat:
     deploy:
       placement:
@@ -508,6 +513,7 @@ services:
     image: rocketchat/rocket.chat:3.0.7
     networks:
       - appnet
+      - externalnet
     environment:
       - MONGO_OPLOG_URL=mongodb://chat-mongo:27017/local
       - ROOT_URL=https://${GIT_DOMAIN}/chat
@@ -550,6 +556,7 @@ services:
     networks:
       #- proxy
       - appnet
+      - externalnet
   portainer-agent:
     image: portainer/agent:1.5.1
     environment: