diff --git a/docker-compose.yml b/docker-compose.yml
index bf488d6..445d546 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -4,8 +4,11 @@ services:
   proxy:
     image: node:22-alpine
     container_name: aria-proxy
+    extra_hosts:
+      - "host.docker.internal:host-gateway"        # Zugriff auf die VM via SSH
     command: >-
-      sh -c "npm install -g @anthropic-ai/claude-code claude-max-api-proxy &&
+      sh -c "apk add --no-cache openssh-client &&
+      npm install -g @anthropic-ai/claude-code claude-max-api-proxy &&
       DIST=$(find /usr/local/lib -path '*/claude-max-api-proxy/dist' -type d | head -1) &&
       sed -i 's/startServer({ port })/startServer({ port, host: process.env.HOST || \"127.0.0.1\" })/' $$DIST/server/standalone.js &&
       sed -i 's/if (model\.includes/if ((model||\"claude-sonnet-4\").includes/g' $$DIST/adapter/cli-to-openai.js &&
@@ -15,6 +18,7 @@ services:
       claude-max-api"
     volumes:
       - ~/.config/claude:/root/.config/claude       # Claude CLI Auth (rw fuer Login via Diagnostic)
+      - ./aria-data/ssh:/root/.ssh:ro               # SSH Keys fuer VM-Zugriff (aria-wohnung)
     environment:
       - HOST=0.0.0.0
       - CLAUDE_CODE_BUBBLEWRAP=1                    # Erlaubt --dangerously-skip-permissions als root