From 9fcc73b874baa00aa91291a1f0c032963ed32a31 Mon Sep 17 00:00:00 2001
From: Alex Blank <alexblank@fastmail.com>
Date: Sat, 16 May 2026 12:25:14 +0000
Subject: [PATCH] refactor(docker): remove dashboard subdomain, prefix traefik
 router names

- Remove TRAEFIK_DASHBOARD_SUBDOMAIN from .env.example (no longer used)
- Rename traefik routers from 'api'/'web' to 'headquarter-api'/'headquarter-web'
- Rename traefik services from 'api'/'web' to 'headquarter-api'/'headquarter-web'

This prevents router/service name collisions with other projects
sharing the same Traefik instance.
---
 .env.example            |  1 -
 docker-compose.prod.yml | 20 ++++++++++----------
 2 files changed, 10 insertions(+), 11 deletions(-)

diff --git a/.env.example b/.env.example
index e732614..315f14c 100644
--- a/.env.example
+++ b/.env.example
@@ -25,7 +25,6 @@ AUTHENTIK_CLIENT_SECRET=your-client-secret
 TRAEFIK_NETWORK=traefik
 TRAEFIK_ENTRYPOINT=websecure
 TRAEFIK_CERT_RESOLVER=letsencrypt
-TRAEFIK_DASHBOARD_SUBDOMAIN=traefik
 TRAEFIK_LOG_LEVEL=INFO
 TOOL_SUBDOMAIN_PATTERN={tool}-{project}-{user}.tools.localhost
 
diff --git a/docker-compose.prod.yml b/docker-compose.prod.yml
index 7ee2b8c..ddbcd42 100644
--- a/docker-compose.prod.yml
+++ b/docker-compose.prod.yml
@@ -25,11 +25,11 @@ services:
       - api-data:/data
     labels:
       - traefik.enable=true
-      - traefik.http.routers.api.rule=Host(`api.${ROOT_DOMAIN:-localhost}`)
-      - traefik.http.routers.api.entrypoints=${TRAEFIK_ENTRYPOINT:-websecure}
-      - traefik.http.routers.api.tls.certresolver=${TRAEFIK_CERT_RESOLVER:-letsencrypt}
-      - traefik.http.services.api.loadbalancer.server.port=8000
-      - traefik.http.routers.api.middlewares=sec-headers@file
+      - traefik.http.routers.headquarter-api.rule=Host(`api.${ROOT_DOMAIN:-localhost}`)
+      - traefik.http.routers.headquarter-api.entrypoints=${TRAEFIK_ENTRYPOINT:-websecure}
+      - traefik.http.routers.headquarter-api.tls.certresolver=${TRAEFIK_CERT_RESOLVER:-letsencrypt}
+      - traefik.http.services.headquarter-api.loadbalancer.server.port=8000
+      - traefik.http.routers.headquarter-api.middlewares=sec-headers@file
     restart: unless-stopped
     healthcheck:
       test: ["CMD-SHELL", "python -c \"import urllib.request; urllib.request.urlopen('http://localhost:8000/health')\""]
@@ -53,11 +53,11 @@ services:
       - traefik
     labels:
       - traefik.enable=true
-      - traefik.http.routers.web.rule=Host(`${ROOT_DOMAIN:-localhost}`)
-      - traefik.http.routers.web.entrypoints=${TRAEFIK_ENTRYPOINT:-websecure}
-      - traefik.http.routers.web.tls.certresolver=${TRAEFIK_CERT_RESOLVER:-letsencrypt}
-      - traefik.http.services.web.loadbalancer.server.port=8080
-      - traefik.http.routers.web.middlewares=sec-headers@file
+      - traefik.http.routers.headquarter-web.rule=Host(`${ROOT_DOMAIN:-localhost}`)
+      - traefik.http.routers.headquarter-web.entrypoints=${TRAEFIK_ENTRYPOINT:-websecure}
+      - traefik.http.routers.headquarter-web.tls.certresolver=${TRAEFIK_CERT_RESOLVER:-letsencrypt}
+      - traefik.http.services.headquarter-web.loadbalancer.server.port=8080
+      - traefik.http.routers.headquarter-web.middlewares=sec-headers@file
     restart: unless-stopped
 
   db: