From b94074242ca5990f2faa71aedc1b704097f670e7 Mon Sep 17 00:00:00 2001
From: pipistrello <wkhooy@gmail.com>
Date: Thu, 4 Jun 2026 13:31:12 +0300
Subject: [PATCH] Add npm, flame, kms stacks for 05-osk docker host

Portainer GitOps compose stacks for serverweb (05-osk):
- nginx-proxy-manager: reverse proxy (80/81/443), DB env-driven
- flame: internal dashboard (5005)
- kms: py-kms Windows activation server (1688)

All app stacks join the external reverseproxy-nw network.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 flame/docker-compose.yaml               | 20 ++++++++++++
 kms/docker-compose.yaml                 | 23 ++++++++++++++
 nginx-proxy-manager/docker-compose.yaml | 41 +++++++++++++++++++++++++
 3 files changed, 84 insertions(+)
 create mode 100644 flame/docker-compose.yaml
 create mode 100644 kms/docker-compose.yaml
 create mode 100644 nginx-proxy-manager/docker-compose.yaml

diff --git a/flame/docker-compose.yaml b/flame/docker-compose.yaml
new file mode 100644
index 0000000..62b45c5
--- /dev/null
+++ b/flame/docker-compose.yaml
@@ -0,0 +1,20 @@
+version: '3'
+
+services:
+  flame:
+    image: pawelmalak/flame:latest
+    container_name: flame
+    ports:
+      - 5005:5005
+    environment:
+      - PASSWORD=${FLAME_PASSWORD}
+    volumes:
+      - /mnt/containers/flame/container-data:/app/data
+      - /var/run/docker.sock:/var/run/docker.sock
+    restart: always
+    networks:
+      - reverseproxy-nw
+
+networks:
+  reverseproxy-nw:
+    external: true
diff --git a/kms/docker-compose.yaml b/kms/docker-compose.yaml
new file mode 100644
index 0000000..cb03793
--- /dev/null
+++ b/kms/docker-compose.yaml
@@ -0,0 +1,23 @@
+version: '3'
+
+services:
+  kms:
+    image: ghcr.io/py-kms-organization/py-kms:python3
+    container_name: py-kms
+    ports:
+      - 1688:1688
+    #  - 8080:8080
+    environment:
+      IP: "::"
+      HWID: RANDOM
+      LOGLEVEL: INFO
+    restart: always
+    volumes:
+      - /mnt/containers/kms/container-data:/home/py-kms/db:Z
+      - /etc/localtime:/etc/localtime:ro
+    networks:
+    - reverseproxy-nw
+      
+networks:
+ reverseproxy-nw:
+    external: true
\ No newline at end of file
diff --git a/nginx-proxy-manager/docker-compose.yaml b/nginx-proxy-manager/docker-compose.yaml
new file mode 100644
index 0000000..c4cf5d2
--- /dev/null
+++ b/nginx-proxy-manager/docker-compose.yaml
@@ -0,0 +1,41 @@
+version: '3'
+services:
+  nginx-proxy-manager:
+    container_name: nginx-proxy-manager
+    image: 'jc21/nginx-proxy-manager:latest'
+    restart: always
+    ports:
+      - '80:80'
+      - '81:81'
+      - '443:443'
+    environment:
+      - DB_MYSQL_HOST=nginx-proxy-manager-db
+      - DB_MYSQL_PORT=3306
+      - DB_MYSQL_USER=npm
+      - DB_MYSQL_PASSWORD=${DB_MYSQL_PASSWORD}
+      - DB_MYSQL_NAME=npm
+    volumes:
+      - /mnt/containers/nginx-proxy-manager/container-data/data:/data:z
+      - /mnt/containers/nginx-proxy-manager/container-data/letsencrypt:/etc/letsencrypt:z
+    networks:
+      - nginx-proxy-manager-nw
+      - reverseproxy-nw
+
+  nginx-proxy-manager-db:
+    container_name: nginx-proxy-manager-db
+    image: 'jc21/mariadb-aria:latest'
+    restart: always
+    environment:
+      - MYSQL_DATABASE=npm
+      - MYSQL_USER=npm
+      - MYSQL_PASSWORD=${DB_MYSQL_PASSWORD}
+      - MYSQL_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD}
+    volumes:
+      - /mnt/containers/nginx-proxy-manager/container-data/mysql:/var/lib/mysql:Z
+    networks:
+      - nginx-proxy-manager-nw
+
+networks:
+  nginx-proxy-manager-nw:
+  reverseproxy-nw:
+    external: true
\ No newline at end of file