commit 6abd9e27fac0eef2f0433a5f60290b682bacc032
Author: Claude <noreply@anthropic.com>
Date:   Thu Jul 30 15:56:01 2026 +0200

    stack: Bestandsaufnahme des Portainer-Stacks (ID 8)
    
    Compose-Definition 1:1 aus Portainer uebernommen. Nicht enthalten, aber
    im Stack laufend: cadvisor (war manuell ergaenzt, config_files-Label leer).
    
    Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

diff --git a/docker-compose.yml b/docker-compose.yml
new file mode 100644
index 0000000..f9a91f5
--- /dev/null
+++ b/docker-compose.yml
@@ -0,0 +1,55 @@
+services:
+  reverse-proxy: #lol
+    image: traefik:v3.7.9
+    container_name: traefik
+    restart: always
+    command:
+      - "--api.dashboard=true"
+      - "--api.insecure=false"
+      - "--log.level=INFO"
+      - "--providers.docker=true"
+      - "--providers.docker.exposedbydefault=false"
+      - "--entrypoints.web.address=:80"
+      - "--entrypoints.websecure.address=:443"
+      - "--certificatesresolvers.letsencrypt.acme.tlschallenge=true"
+      - "--certificatesresolvers.letsencrypt.acme.email=gamemaster@axion1337.de"
+      - "--certificatesresolvers.letsencrypt.acme.storage=/letsencrypt/acme.json"
+      - "--entrypoints.web.http.redirections.entryPoint.to=websecure"
+      - "--entrypoints.web.http.redirections.entryPoint.scheme=https"
+      - "--metrics.prometheus=true"
+      - "--metrics.prometheus.addEntryPointsLabels=true"
+      - "--metrics.prometheus.addServicesLabels=true"
+    ports:
+      - "80:80"
+      - "443:443"
+    volumes:
+      - "/var/run/docker.sock:/var/run/docker.sock:ro"
+      - "./letsencrypt:/letsencrypt"
+    networks:
+      - traefik
+  gitea:
+    image: gitea/gitea:latest
+    environment:
+      - USER_UID=1000
+      - USER_GID=1000
+      - GITEA__server__ROOT_URL=https://rohana.axion1337.de
+      - GITEA__service__DISABLE_REGISTRATION=true
+    volumes:
+      - gitea-data:/data
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.gitea.rule=Host(`rohana.axion1337.de`)
+      - traefik.http.routers.gitea.entrypoints=websecure
+      - traefik.http.routers.gitea.tls.certresolver=letsencrypt
+      - traefik.http.services.gitea.loadbalancer.server.port=3000
+    networks:
+      - traefik
+    restart: always
+
+networks:
+  traefik:
+    external: true
+  default:
+
+volumes:
+  gitea-data: