Repo traefik files had drifted behind the live config on serverweb. Pull the
authoritative versions: file-only provider (drop docker provider), Portainer
self-signed serversTransport, and correct '||' HostSNI syntax for exchange.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Static instructions site for client 05 served at help.osk.team. Markdown +
images built by Zensical (zensical build) into public/, served by nginx behind
Traefik. Content is bind-mounted from /mnt/containers/help-osk-docs (absolute
host path — Portainer GitOps can't resolve relative mounts). Adds the
help/help-osk router+service to traefik/dynamic/web.yml (TLS via Let's Encrypt,
public/open).
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Mirrors the live /mnt/containers/portainer/docker-compose.yaml on serverweb,
previously only on the host.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Portainer GitOps compose stacks for serverweb (05-osk):
- nginx-proxy-manager: reverse proxy (80/81/443), DB env-driven
- flame: internal dashboard (5005)
- kms: py-kms Windows activation server (1688)
All app stacks join the external reverseproxy-nw network.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>