Update dns, fix template

ansible/inventories/production/host_vars/rpi0.home.jthan.io/vars.yaml

@@ -53,6 +53,9 @@ private_domains:
       - type: A
         name: "docker.home.jthan.io"
         value: 192.168.1.18
+      - type: A
+        name: "papra.home.jthan.io"
+        value: 192.168.1.18
       - type: A
         name: "whoami.home.jthan.io"
         value: 192.168.1.18
@@ -98,6 +101,9 @@ private_domains:
       - type: AAAA
         name: "music.home.jthan.io"
         value: "2602:fb57:c20:b00:be24:11ff:fef4:1b8d"
+      - type: AAAA
+        name: "papra.home.jthan.io"
+        value: "2602:fb57:c20:b00:be24:11ff:fef4:1b8d"
       - type: AAAA
         name: "auth.home.jthan.io"
         value: "2602:fb57:c20:b00:be24:11ff:fee6:8593"

ansible/roles/dockhand/tasks/templates/docker-compose.yaml.j2

@@ -20,11 +20,12 @@ services:
       - ALLOW_STOP=1
       - ALLOW_RESTARTS=1
       # Optional: enable for terminal access
-      # - EXEC=1
+      - EXEC=1
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock:ro
     networks:
       - socket-proxy
+      - proxy
 
   dockhand:
     image: fnsys/dockhand:latest
@@ -32,17 +33,27 @@ services:
     restart: unless-stopped
     depends_on:
       - socket-proxy
-    ports:
-      - "3000:3000"
     volumes:
       - dockhand_data:/app/data
     networks:
       - socket-proxy
+      - proxy
       - default
+    ports:
+      - 3000:3000
+    labels:
+      - "traefik.enable=true"
+      - "traefik.docker.network=proxy"
+      - "traefik.http.routers.dockhand.rule=Host(`docker.home.jthan.io`)" 
+      - "traefik.http.routers.dockhand.entrypoints=websecure"
+      - "traefik.http.routers.dockhand.tls.certresolver=myresolver"
+        #- "traefik.http.services.dockhand.loadbalancer.server.port=3000"
 
 networks:
   socket-proxy:
     internal: true
+  proxy:
+    external: true
 
 volumes:
   dockhand_data: