From a2fa11e8ffb775e019572ae33b3fc88e3bba1280 Mon Sep 17 00:00:00 2001
From: Jonathan DeMasi <me@jthan.io>
Date: Sun, 7 Jun 2026 12:45:44 -0600
Subject: [PATCH] Update dns, fix template

---
 .../host_vars/rpi0.home.jthan.io/vars.yaml      |  6 ++++++
 .../tasks/templates/docker-compose.yaml.j2      | 17 ++++++++++++++---
 2 files changed, 20 insertions(+), 3 deletions(-)

diff --git a/ansible/inventories/production/host_vars/rpi0.home.jthan.io/vars.yaml b/ansible/inventories/production/host_vars/rpi0.home.jthan.io/vars.yaml
index 2e39176..5dfcebc 100644
--- a/ansible/inventories/production/host_vars/rpi0.home.jthan.io/vars.yaml
+++ b/ansible/inventories/production/host_vars/rpi0.home.jthan.io/vars.yaml
@@ -53,6 +53,9 @@ private_domains:
       - type: A
         name: "docker.home.jthan.io"
         value: 192.168.1.18
+      - type: A
+        name: "papra.home.jthan.io"
+        value: 192.168.1.18
       - type: A
         name: "whoami.home.jthan.io"
         value: 192.168.1.18
@@ -98,6 +101,9 @@ private_domains:
       - type: AAAA
         name: "music.home.jthan.io"
         value: "2602:fb57:c20:b00:be24:11ff:fef4:1b8d"
+      - type: AAAA
+        name: "papra.home.jthan.io"
+        value: "2602:fb57:c20:b00:be24:11ff:fef4:1b8d"
       - type: AAAA
         name: "auth.home.jthan.io"
         value: "2602:fb57:c20:b00:be24:11ff:fee6:8593"
diff --git a/ansible/roles/dockhand/tasks/templates/docker-compose.yaml.j2 b/ansible/roles/dockhand/tasks/templates/docker-compose.yaml.j2
index 96b9098..55b87fd 100644
--- a/ansible/roles/dockhand/tasks/templates/docker-compose.yaml.j2
+++ b/ansible/roles/dockhand/tasks/templates/docker-compose.yaml.j2
@@ -20,11 +20,12 @@ services:
       - ALLOW_STOP=1
       - ALLOW_RESTARTS=1
       # Optional: enable for terminal access
-      # - EXEC=1
+      - EXEC=1
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock:ro
     networks:
       - socket-proxy
+      - proxy
 
   dockhand:
     image: fnsys/dockhand:latest
@@ -32,17 +33,27 @@ services:
     restart: unless-stopped
     depends_on:
       - socket-proxy
-    ports:
-      - "3000:3000"
     volumes:
       - dockhand_data:/app/data
     networks:
       - socket-proxy
+      - proxy
       - default
+    ports:
+      - 3000:3000
+    labels:
+      - "traefik.enable=true"
+      - "traefik.docker.network=proxy"
+      - "traefik.http.routers.dockhand.rule=Host(`docker.home.jthan.io`)" 
+      - "traefik.http.routers.dockhand.entrypoints=websecure"
+      - "traefik.http.routers.dockhand.tls.certresolver=myresolver"
+        #- "traefik.http.services.dockhand.loadbalancer.server.port=3000"
 
 networks:
   socket-proxy:
     internal: true
+  proxy:
+    external: true
 
 volumes:
   dockhand_data: