Changed docker network

backend/postgres/compose.yml

@@ -25,9 +25,9 @@ volumes:
     name: pgdata
 secrets:
   POSTGRES_USER:
-    file: .secrets/POSTGRES_USER
+    file: ./.secrets/POSTGRES_USER
   POSTGRES_PASS:
-    file: .secrets/POSTGRES_PASS
+    file: ./.secrets/POSTGRES_PASS
 networks:
   db:
     external:

frontend/traefik/compose.yml

@@ -1,6 +1,6 @@
 services:
   traefik:
-    image: "traefik:v3.5.3"
+    image: "traefik:${TAG}"
     container_name: ${SUBDOMAIN}
     restart: always
     command:
@@ -65,7 +65,7 @@ services:
       - frontend
       - webapp
       - mgmt
-      - remote
+      - jump
 secrets:
   # SSH_PORT:
   #   file: .secrets/SSH_PORT
@@ -83,6 +83,6 @@ networks:
   mgmt:
     external:
       true
-  remote:
+  jump:
     external:
       true

mgmt/adminer/compose.yml

@@ -1,6 +1,6 @@
 services:
   adminer:
-    image: adminer:5.4.0
+    image: adminer:${TAG}
     container_name: $SUBDOMAIN
     restart: always
     labels:

webapp/it-tools-sharevb/.env.example

@@ -0,0 +1,2 @@
+DOMAIN_NAME=
+SUBDOMAIN=

webapp/it-tools-sharevb/compose.yml

@@ -0,0 +1,32 @@
+services:
+  it-tools:
+    image: sharevb/it-tools:latest
+    container_name: it-tools
+    healthcheck:
+      test: ["CMD-SHELL", "wget --no-verbose --tries=1 --spider http://127.0.0.1:8080/ || exit 1"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 40s
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.$SUBDOMAIN.rule=Host(`${SUBDOMAIN}.${DOMAIN_NAME}`)
+      - traefik.http.routers.$SUBDOMAIN.tls=true
+      - traefik.http.routers.$SUBDOMAIN.entrypoints=web,websecure
+      - traefik.http.routers.$SUBDOMAIN.tls.certresolver=cloudflare
+      - traefik.http.middlewares.$SUBDOMAIN.headers.SSLRedirect=true
+      - traefik.http.middlewares.$SUBDOMAIN.headers.STSSeconds=315360000
+      - traefik.http.middlewares.$SUBDOMAIN.headers.browserXSSFilter=true
+      - traefik.http.middlewares.$SUBDOMAIN.headers.contentTypeNosniff=true
+      - traefik.http.middlewares.$SUBDOMAIN.headers.forceSTSHeader=true
+      - traefik.http.middlewares.$SUBDOMAIN.headers.SSLHost=${DOMAIN_NAME}
+      - traefik.http.middlewares.$SUBDOMAIN.headers.STSIncludeSubdomains=true
+      - traefik.http.middlewares.$SUBDOMAIN.headers.STSPreload=true
+      - traefik.http.routers.$SUBDOMAIN.middlewares=$SUBDOMAIN@docker
+      - traefik.http.services.$SUBDOMAIN.loadbalancer.server.port=8080
+    networks:
+      - webapp
+networks:
+  webapp:
+    external:
+      true

webapp/super-productivity/compose.yml

@@ -0,0 +1,27 @@
+services:
+  super-productivity:
+    image: johannesjo/super-productivity:latest
+    container_name: super-productivity
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.$SUBDOMAIN.rule=Host(`${SUBDOMAIN}.${DOMAIN_NAME}`)
+      - traefik.http.routers.$SUBDOMAIN.tls=true
+      - traefik.http.routers.$SUBDOMAIN.entrypoints=web,websecure
+      - traefik.http.routers.$SUBDOMAIN.tls.certresolver=cloudflare
+      - traefik.http.middlewares.$SUBDOMAIN.headers.SSLRedirect=true
+      - traefik.http.middlewares.$SUBDOMAIN.headers.STSSeconds=315360000
+      - traefik.http.middlewares.$SUBDOMAIN.headers.browserXSSFilter=true
+      - traefik.http.middlewares.$SUBDOMAIN.headers.contentTypeNosniff=true
+      - traefik.http.middlewares.$SUBDOMAIN.headers.forceSTSHeader=true
+      - traefik.http.middlewares.$SUBDOMAIN.headers.SSLHost=${DOMAIN_NAME}
+      - traefik.http.middlewares.$SUBDOMAIN.headers.STSIncludeSubdomains=true
+      - traefik.http.middlewares.$SUBDOMAIN.headers.STSPreload=true
+      - traefik.http.routers.$SUBDOMAIN.middlewares=authentik-forwardauth@docker
+      - traefik.http.services.$SUBDOMAIN.loadbalancer.server.port=80
+    restart: unless-stopped
+    networks:
+      - webapp
+networks:
+  webapp:
+    external:
+      true