From ca94e43d966a8c165c4ab23e5d838e543cf497df Mon Sep 17 00:00:00 2001
From: admin <admin@gitea.local>
Date: Sat, 24 Oct 2026 22:51:04 +0000
Subject: [PATCH] fix: attach tuwunel services to coolify proxy network
 (traefik.docker.network)

---
 docker-compose.yaml | 90 +++++++++++++++++++++------------------------
 1 file changed, 42 insertions(+), 48 deletions(-)

diff --git a/docker-compose.yaml b/docker-compose.yaml
index 1949e02..ad103b7 100644
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -7,62 +7,56 @@ services:
     cpus: 0.5
     stop_grace_period: 30s
     expose:
-      - "8008"
+    - '8008'
     environment:
-      TUWUNEL_SERVER_NAME: "mmdv-chats.dynv6.net"
-      TUWUNEL_DATABASE_PATH: "/var/lib/tuwunel"
-      TUWUNEL_PORT: "8008"
-      TUWUNEL_ADDRESS: "0.0.0.0"
-      TUWUNEL_ALLOW_REGISTRATION: "true"
-      TUWUNEL_REGISTRATION_TOKEN: "614f27b3a91e8c0456c9d82e7af0f58b"
-      TUWUNEL_ALLOW_FEDERATION: "true"
-      TUWUNEL_SHOW_ALL_LOCAL_USERS_IN_USER_DIRECTORY: "true"
-      TUWUNEL_NEW_USER_DISPLAYNAME_SUFFIX: ""
-      TUWUNEL_TRUSTED_SERVERS: "[\"matrix.org\"]"
+      TUWUNEL_SERVER_NAME: mmdv-chats.dynv6.net
+      TUWUNEL_DATABASE_PATH: /var/lib/tuwunel
+      TUWUNEL_PORT: '8008'
+      TUWUNEL_ADDRESS: 0.0.0.0
+      TUWUNEL_ALLOW_REGISTRATION: 'true'
+      TUWUNEL_REGISTRATION_TOKEN: 614f27b3a91e8c0456c9d82e7af0f58b
+      TUWUNEL_ALLOW_FEDERATION: 'true'
+      TUWUNEL_SHOW_ALL_LOCAL_USERS_IN_USER_DIRECTORY: 'true'
+      TUWUNEL_NEW_USER_DISPLAYNAME_SUFFIX: ''
+      TUWUNEL_TRUSTED_SERVERS: '["matrix.org"]'
     volumes:
-      - tuwunel-db:/var/lib/tuwunel
+    - tuwunel-db:/var/lib/tuwunel
     labels:
-      traefik.enable: "true"
-      traefik.http.routers.tuwunel-http.entrypoints: "https"
-      traefik.http.routers.tuwunel-http.rule: "Host(`mmdv-chats.dynv6.net`)"
-      traefik.http.routers.tuwunel-http.tls.certresolver: "letsencrypt"
-      traefik.http.routers.tuwunel-http.service: "tuwunel"
-      traefik.http.services.tuwunel.loadbalancer.server.port: "8008"
-
+      traefik.enable: 'true'
+      traefik.http.routers.tuwunel-http.entrypoints: https
+      traefik.http.routers.tuwunel-http.rule: Host(`mmdv-chats.dynv6.net`)
+      traefik.http.routers.tuwunel-http.tls.certresolver: letsencrypt
+      traefik.http.routers.tuwunel-http.service: tuwunel
+      traefik.http.services.tuwunel.loadbalancer.server.port: '8008'
+      traefik.docker.network: coolify
+    networks:
+    - coolify
   well-known:
     image: nginx:alpine
     container_name: tuwunel-wellknown
     restart: unless-stopped
     expose:
-      - "80"
+    - '80'
     command:
-      - sh
-      - -c
-      - |
-        mkdir -p /usr/share/nginx/html/.well-known/matrix
-        cat > /usr/share/nginx/html/.well-known/matrix/server <<'EOF'
-        {
-          "m.server": "mmdv-chats.dynv6.net"
-        }
-        EOF
-        cat > /usr/share/nginx/html/.well-known/matrix/client <<'EOF'
-        {
-          "m.homeserver": {
-            "base_url": "https://mmdv-chats.dynv6.net"
-          },
-          "m.identity_server": {
-            "base_url": "https://mmdv-chats.dynv6.net"
-          }
-        }
-        EOF
-        nginx -g 'daemon off;'
+    - sh
+    - -c
+    - "mkdir -p /usr/share/nginx/html/.well-known/matrix\ncat > /usr/share/nginx/html/.well-known/matrix/server\
+      \ <<'EOF'\n{\n  \"m.server\": \"mmdv-chats.dynv6.net\"\n}\nEOF\ncat > /usr/share/nginx/html/.well-known/matrix/client\
+      \ <<'EOF'\n{\n  \"m.homeserver\": {\n    \"base_url\": \"https://mmdv-chats.dynv6.net\"\
+      \n  },\n  \"m.identity_server\": {\n    \"base_url\": \"https://mmdv-chats.dynv6.net\"\
+      \n  }\n}\nEOF\nnginx -g 'daemon off;'\n"
     labels:
-      traefik.enable: "true"
-      traefik.http.routers.tuwunel-wk.entrypoints: "https"
-      traefik.http.routers.tuwunel-wk.rule: "Host(`mmdv-chats.dynv6.net`) && PathPrefix(`/.well-known`)"
-      traefik.http.routers.tuwunel-wk.tls.certresolver: "letsencrypt"
-      traefik.http.routers.tuwunel-wk.service: "tuwunel-wk"
-      traefik.http.services.tuwunel-wk.loadbalancer.server.port: "80"
-
+      traefik.enable: 'true'
+      traefik.http.routers.tuwunel-wk.entrypoints: https
+      traefik.http.routers.tuwunel-wk.rule: Host(`mmdv-chats.dynv6.net`) && PathPrefix(`/.well-known`)
+      traefik.http.routers.tuwunel-wk.tls.certresolver: letsencrypt
+      traefik.http.routers.tuwunel-wk.service: tuwunel-wk
+      traefik.http.services.tuwunel-wk.loadbalancer.server.port: '80'
+      traefik.docker.network: coolify
+    networks:
+    - coolify
 volumes:
-  tuwunel-db:
+  tuwunel-db: null
+networks:
+  coolify:
+    external: true