UPdate README

ai/llama-cpp/docker-compose.yml

@@ -0,0 +1,38 @@
+services:
+  llama-cpp:
+    image: ghcr.io/ggml-org/llama.cpp:server-cuda
+    container_name: llama-cpp
+    restart: unless-stopped
+    networks:
+      - traefik
+    volumes:
+      - /pwspool/software/llama-cpp/models:/models
+    # We moved your environment variables here to guarantee they are applied
+    command: 
+      - "--model"
+      - "/models/Qwen3.5-35B-A3B-UD-IQ2_XXS.gguf"
+      - "--host"
+      - "0.0.0.0"
+      - "--port"
+      - "8080"
+      - "--n-gpu-layers"
+      - "99"
+      - "--ctx-size"
+      - "8192"
+    deploy:
+      resources:
+        reservations:
+          devices:
+            - driver: nvidia
+              count: all
+              capabilities: [gpu]
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.llama.rule=Host(`llm.whitney.rip`)"
+      - "traefik.http.routers.llama.entrypoints=websecure"
+      - "traefik.http.routers.llama.tls.certresolver=lets-encrypt"
+      - "traefik.http.services.llama.loadbalancer.server.port=8080"
+
+networks:
+  traefik:
+    external: true

ai/n8n/docker-compose.yml

@@ -51,4 +51,6 @@ services:
       POSTGRES_DB: ${DB_POSTGRESDB_DATABASE}
     volumes:
       - /pwspool/software/n8n/data:/var/lib/postgresql/data
+    labels:
+      - traefik.enable=false
 

media/plex/docker-compose.yml

@@ -23,11 +23,11 @@ services:
       - /pwspool/archive/plex/downloads:/downloads
     ports:
       - "32400:32400"
-    #labels:
+    labels:
-    #  - traefik.enable=true
+      - traefik.enable=true
-    #  - traefik.http.routers.plex.rule=Host(`watch.whitney.rip`)
+      - traefik.http.routers.plex.rule=Host(`watch.whitney.rip`)
-    #  - traefik.http.routers.plex.tls=true
+      - traefik.http.routers.plex.tls=true
-    #  - traefik.http.routers.plex.tls.certresolver=lets-encrypt
+      - traefik.http.routers.plex.tls.certresolver=lets-encrypt
-    #  - traefik.http.services.plex.loadbalancer.server.port=32400
+      - traefik.http.services.plex.loadbalancer.server.port=32400
 
 

productivity/karakeep/docker-compose.yml

@@ -35,6 +35,8 @@ services:
       - --remote-debugging-address=0.0.0.0
       - --remote-debugging-port=9222
       - --hide-scrollbars
+    labels:
+      - traefik.enable=false
 
   meilisearch:
     image: getmeili/meilisearch:latest
@@ -46,6 +48,8 @@ services:
       - karakeep
     volumes:
       - meilisearch:/meili_data
+    labels:
+      - traefik.enable=false
 
 volumes:
   meilisearch:

productivity/mailserver/docker-compose.yml

@@ -0,0 +1,53 @@
+networks:
+  traefik:
+    external: true
+
+services:
+  stalwart:
+    image: stalwartlabs/mail-server:latest
+    container_name: stalwart-mail
+    restart: unless-stopped
+    networks:
+      - traefik-public
+    environment:
+      - STALWART_URL=https://mail.whitney.rip
+    volumes:
+      - /pwspool/software/mailserver/stalwart/data:/opt/stalwart-mail
+      # Map the dumped certificates from the sidecar
+      - /pwspool/software/mailserver/stalwart/certs:/opt/stalwart-mail/etc/certs:ro
+    labels:
+      - "traefik.enable=true"
+      # HTTP - Admin UI & Webmail (JMAP)
+      - "traefik.http.routers.mail-ui.rule=Host(`mail.whitney.rip`)"
+      - "traefik.http.routers.mail-ui.entrypoints=websecure"
+      - "traefik.http.routers.mail-ui.tls.certresolver=lets-encrypt"
+      - "traefik.http.services.mail-ui.loadbalancer.server.port=8080"
+
+      # TCP - SMTP (Submission 587)
+      - "traefik.tcp.routers.mail-smtp.rule=HostSNI(`*`)"
+      - "traefik.tcp.routers.mail-smtp.entrypoints=submission"
+      - "traefik.tcp.routers.mail-smtp.service=mail-smtp-svc"
+      - "traefik.tcp.services.mail-smtp-svc.loadbalancer.server.port=587"
+      # Enable PROXY protocol so Stalwart sees the real client IP
+      - "traefik.tcp.services.mail-smtp-svc.loadbalancer.proxyProtocol.version=2"
+
+      # TCP - IMAPS (993)
+      - "traefik.tcp.routers.mail-imaps.rule=HostSNI(`*`)"
+      - "traefik.tcp.routers.mail-imaps.entrypoints=imaps"
+      - "traefik.tcp.routers.mail-imaps.service=mail-imaps-svc"
+      - "traefik.tcp.services.mail-imaps-svc.loadbalancer.server.port=993"
+      - "traefik.tcp.services.mail-imaps-svc.loadbalancer.proxyProtocol.version=2"
+
+  # 2. Certificate Dumper (Converts Traefik's JSON to .pem files)
+  cert-dumper:
+    image: ldez/traefik-certs-dumper:v2.8.1
+    container_name: mail-cert-dumper
+    volumes:
+      # Depends on location of acme.json file in traefik docker config.
+      - /home/jr/olomana-repo/software-development/traefik/acme.json:/app/acme.json:ro
+      - /pwspool/software/mailserver/stalwart/certs:/app/certs:rw
+    command: >
+      file --watch 
+      --domain "mail.whitney.rip" 
+      --dest /app/certs
+

productivity/penpot/docker-compose.yml

@@ -16,7 +16,7 @@ services:
       - "traefik.http.routers.penpot.rule=Host(`blueprint.whitney.rip`)"
       - "traefik.http.routers.penpot.entrypoints=websecure"
       - "traefik.http.routers.penpot.tls=true"
-      - "traefik.http.routers.penpot.tls.certresolver=letsencrypt"
+      - "traefik.http.routers.penpot.tls.certresolver=lets-encrypt"
       - "traefik.http.services.penpot.loadbalancer.server.port=8080"
     depends_on:
       - penpot-backend

productivity/planka/docker-compose.yml

@@ -43,4 +43,6 @@ services:
       interval: 10s
       timeout: 5s
       retries: 5
+    labels:
+      - traefik.enable=false
 

software-development/traefik/README.md

@@ -5,30 +5,35 @@ Traefik is my load balancer.
 
 ## Setup
 
-### Files
+### Folder Structure
 Create/Fill in the following files in a `traefik/` directory under this one using the provided templates:
 - `traefik.toml`
 - `traefik-dynamic.toml`.
 
-The file `traefik/acme.json` will be generated on first run. Make sure it eventually gets permission code 600. You might need to create a blank file before the first run.
+Before the first run, create `acme.json` with the initial contents `{}`. Make sure it has permission code 600 (`chmod 600 acme.json`), incorrect permissions will break traefik.
 
 ### Volumes
 In addition to the above files, make sure the docker socket is mounted:
 - `/var/run/docker.sock:/var/run/docker.sock:ro`
 
-## Reminders
+## Notes
-The file `acme.json` can be weird when it comes to permissions. It will be generated on first run.  
-Ensure it is permission code 600.
 
-## Adjustments
+### Adjustments
 By default there are 60s upload, download, and idle timeouts. Adjust them by modifying `traefik.toml`:
-```
+```yaml
 [entryPoints.websecure.transport.respondingTimeouts]
     readTimeout = "512s"
     writeTimeout = "512s"
     idleTimeout = "512s"
 ```
 
-## References
+### References
 https://doc.traefik.io/traefik/getting-started/quick-start/  
 https://doc.traefik.io/traefik/user-guides/docker compose/basic-example/
+
+## Runbook
+```bash
+docker compose down && docker system prune && docker compose up -d && docker logs -f traefik
+```
+
+

utility/linkwarden/docker-compose.yml

@@ -14,6 +14,8 @@ services:
       - linkwarden
     volumes:
       - /pwspool/software/linkwarden/db:/var/lib/postgresql/data
+    labels:
+      - traefik.enable=false
   linkwarden:
     container_name: linkwarden
     env_file: properties.env
@@ -42,4 +44,6 @@ services:
       - linkwarden 
     volumes:
       - /pwspool/software/linkwarden/meili_data:/meili_data
+    labels:
+      - traefik.enable=false