Add npm, flame, kms stacks for 05-osk docker host

Portainer GitOps compose stacks for serverweb (05-osk):
- nginx-proxy-manager: reverse proxy (80/81/443), DB env-driven
- flame: internal dashboard (5005)
- kms: py-kms Windows activation server (1688)

All app stacks join the external reverseproxy-nw network.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

flame/docker-compose.yaml

@@ -0,0 +1,20 @@
+version: '3'
+
+services:
+  flame:
+    image: pawelmalak/flame:latest
+    container_name: flame
+    ports:
+      - 5005:5005
+    environment:
+      - PASSWORD=${FLAME_PASSWORD}
+    volumes:
+      - /mnt/containers/flame/container-data:/app/data
+      - /var/run/docker.sock:/var/run/docker.sock
+    restart: always
+    networks:
+      - reverseproxy-nw
+
+networks:
+  reverseproxy-nw:
+    external: true

kms/docker-compose.yaml

@@ -0,0 +1,23 @@
+version: '3'
+
+services:
+  kms:
+    image: ghcr.io/py-kms-organization/py-kms:python3
+    container_name: py-kms
+    ports:
+      - 1688:1688
+    #  - 8080:8080
+    environment:
+      IP: "::"
+      HWID: RANDOM
+      LOGLEVEL: INFO
+    restart: always
+    volumes:
+      - /mnt/containers/kms/container-data:/home/py-kms/db:Z
+      - /etc/localtime:/etc/localtime:ro
+    networks:
+    - reverseproxy-nw
+      
+networks:
+ reverseproxy-nw:
+    external: true

nginx-proxy-manager/docker-compose.yaml

@@ -0,0 +1,41 @@
+version: '3'
+services:
+  nginx-proxy-manager:
+    container_name: nginx-proxy-manager
+    image: 'jc21/nginx-proxy-manager:latest'
+    restart: always
+    ports:
+      - '80:80'
+      - '81:81'
+      - '443:443'
+    environment:
+      - DB_MYSQL_HOST=nginx-proxy-manager-db
+      - DB_MYSQL_PORT=3306
+      - DB_MYSQL_USER=npm
+      - DB_MYSQL_PASSWORD=${DB_MYSQL_PASSWORD}
+      - DB_MYSQL_NAME=npm
+    volumes:
+      - /mnt/containers/nginx-proxy-manager/container-data/data:/data:z
+      - /mnt/containers/nginx-proxy-manager/container-data/letsencrypt:/etc/letsencrypt:z
+    networks:
+      - nginx-proxy-manager-nw
+      - reverseproxy-nw
+
+  nginx-proxy-manager-db:
+    container_name: nginx-proxy-manager-db
+    image: 'jc21/mariadb-aria:latest'
+    restart: always
+    environment:
+      - MYSQL_DATABASE=npm
+      - MYSQL_USER=npm
+      - MYSQL_PASSWORD=${DB_MYSQL_PASSWORD}
+      - MYSQL_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD}
+    volumes:
+      - /mnt/containers/nginx-proxy-manager/container-data/mysql:/var/lib/mysql:Z
+    networks:
+      - nginx-proxy-manager-nw
+
+networks:
+  nginx-proxy-manager-nw:
+  reverseproxy-nw:
+    external: true