Commit Graph

12 Commits

Author SHA1 Message Date
Eduardo David Paredes Vara 61134d7834 feat(authentik): añadir script de creación de aplicaciones OAuth
- create-auth-app.sh: script interactivo para crear providers y
  aplicaciones en Authentik vía API, automatizando la integración SSO
- docker-compose.yml y stack.env: ajustes del stack
- README.md: documentación actualizada

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-25 05:47:33 +00:00
root 7dce4a06cb fix: hardcode Traefik port labels (Gotcha 6 - vars not expanded in labels)
Coolify does not expand ${VAR} in label values. All loadbalancer port
labels must use hardcoded values:
- trilium:   ${TRILIUM_HTTP_PORT}  → 8080
- adguard:   ${ADGUARD_HTTP_PORT}  → 80
- authentik: ${AUTHENTIK_HTTP_PORT} → 9000
- gitea:     ${GITEA_HTTP_PORT}    → 3000
- wireguard: ${WG_UI_PORT}         → 51821

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-03-23 02:44:58 +00:00
root 15341785b2 fix: adguard and authentik use /opt bind mounts (original Portainer paths)
Data was in /opt/adguard/{work,conf} and /opt/authentik/{postgres,redis}
all along. Previous commit used named volumes which would ignore this data.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-03-23 02:10:39 +00:00
root 786c55bc01 fix: replace variable bind mounts with hardcoded paths/named volumes
Coolify converts ${VAR}:/path bind mounts to named Docker volumes when
the variable is not resolved. Fixed per stack:

- adguard: -> named volumes (data already in Coolify-created volumes)
- authentik: -> named volumes (data already in Coolify-created volumes)
- gitea: -> /opt/gitea/{postgres,data,runner}
- mail-relay: -> /opt/mail-relay/{queue,opendkim,secrets/...}
- media-server: COMMON_PATH -> /opt/media (hardcoded)
- trilium: -> /opt/trilium/data
- wireguard: -> /opt/wg-easy + /lib/modules

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-03-23 02:09:08 +00:00
root eb6715ccc0 feat: migrate all stacks to Coolify (proxy network, clean labels, pull_policy)
- Remove traefik.enable, traefik.docker.network, traefik.http.routers.* from all services
- Keep traefik.http.services.<name>.loadbalancer.server.port labels
- Keep all middleware definitions (forwardauth, headers, redirects)
- Add pull_policy: always to main/frontend services
- Add proxy network + label to gitea and karakeep (previously missing)
- Add COOLIFY-TEMPLATE.md reference guide

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-03-23 01:51:55 +00:00
Eduardo David Paredes Vara dc20ef7f03 middelware fix 2026-02-17 08:57:58 +00:00
Eduardo David Paredes Vara 8db0344a81 ak update 2026-02-17 08:36:30 +00:00
eduardo 5a38c504a0 Refactor Traefik configuration for Authentik
Updated Traefik router rules and added new callback for www.thehomelesssherlock.com.
2026-02-15 16:27:18 +00:00
Eduardo David Paredes Vara 15e14de5b9 Update docker-compose.yml 2025-12-22 16:27:54 +01:00
Eduardo David Paredes Vara 2143cd3da9 Update Traefik router rule for authentik outpost 2025-12-18 11:27:18 +01:00
Eduardo David Paredes Vara 517f1721ab Refactor Traefik configuration for Authentik
Updated Traefik router rules and added new callback for www.thehomelesssherlock.com.
2025-12-18 10:50:07 +01:00
Eduardo David Paredes Vara 4ac3881958 Initial clean commit (history purged) 2025-12-03 17:15:06 +00:00