diff --git a/backend/surrealdb/.env.example b/backend/surrealdb/.env.example
new file mode 100644
index 0000000..a2e315c
--- /dev/null
+++ b/backend/surrealdb/.env.example
@@ -0,0 +1,4 @@
+# SurrealDB Configuration
+# Root password is loaded from ./.secrets/SURREAL_ROOT_PASSWORD via Docker secrets
+# Timezone settings
+TZ=
diff --git a/backend/surrealdb/compose.yml b/backend/surrealdb/compose.yml
new file mode 100644
index 0000000..5dd7643
--- /dev/null
+++ b/backend/surrealdb/compose.yml
@@ -0,0 +1,28 @@
+services:
+  surrealdb:
+    image: surrealdb/surrealdb:v2
+    container_name: surrealdb
+    # entrypoint: ["/bin/sh"]
+    command: start --user root --pass $(cat /run/secrets/SURREAL_ROOT_PASSWORD) rocksdb:/mydata/mydatabase.db
+    user: root
+    restart: always
+    env_file:
+      - .env
+    secrets:
+      - SURREAL_ROOT_PASSWORD
+    volumes:
+      - surreal_data:/mydata
+    networks:
+      - db
+
+volumes:
+  surreal_data:
+    name: surreal_data
+
+secrets:
+  SURREAL_ROOT_PASSWORD:
+    file: ./.secrets/SURREAL_ROOT_PASSWORD
+
+networks:
+  db:
+    external: true