Add shared public edge (nginx + certbot)

One nginx owns host ports 80/443 for every project (Gitea, Musify) and
proxies by container name over infra-net and gitea_gitea; a certbot
service renews the Let's Encrypt certificates.
This commit is contained in:
2026-09-23 16:56:28 +02:00
parent deefb6d0cd
commit 24f801cf2f
10 changed files with 234 additions and 1 deletions
+1 -1
View File
@@ -8,7 +8,7 @@
#
# Replace every CHANGE_ME with a strong random value (`openssl rand -hex 24`;
# the Zitadel masterkey needs exactly 32 characters) and auth.example.com
# with the real hostname the edge (e.g. Musify's nginx) terminates TLS for.
# with the real hostname the shared edge (edge/) terminates TLS for.
# --- PostgreSQL ---------------------------------------------------------------
POSTGRES_USER=postgres