From 37c45065e2025fd3a44995b135460abd784ecb14 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Sebastian=20Kr=C3=BCger?= <valknar@pivoine.art>
Date: Sat, 15 Nov 2025 16:17:28 +0100
Subject: [PATCH] chore: remove kit stack
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Remove kit service and related configuration:
- Removed kit from compose includes
- Deleted kit/compose.yaml (landing, vert, pastel, stirling, units, draw, figlet)
- Removed KIT env vars from arty.yml

Kit services were stateless and don't require data migration.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
---
 arty.yml         |  18 -----
 compose.yaml     |   1 -
 kit/compose.yaml | 206 -----------------------------------------------
 3 files changed, 225 deletions(-)
 delete mode 100644 kit/compose.yaml

diff --git a/arty.yml b/arty.yml
index af3b7c9..64a5b73 100644
--- a/arty.yml
+++ b/arty.yml
@@ -121,24 +121,6 @@ envs:
     JOPLIN_TRAEFIK_HOST: joplin.pivoine.art
     JOPLIN_APP_PORT: 22300
     JOPLIN_DB_NAME: joplin
-    # Kit (combines Vert and Paint with landing page)
-    KIT_TRAEFIK_ENABLED: true
-    KIT_COMPOSE_PROJECT_NAME: kit
-    KIT_TRAEFIK_HOST: kit.pivoine.art
-    KIT_LANDING_IMAGE: ghcr.io/valknarness/kit-ui:latest
-    KIT_VERT_IMAGE: ghcr.io/vert-sh/vert:latest
-    KIT_VERT_TRAEFIK_HOST: vert.kit.pivoine.art
-    KIT_PASTEL_API_IMAGE: ghcr.io/valknarness/pastel-api:latest
-    KIT_PASTEL_UI_IMAGE: ghcr.io/valknarness/pastel-ui:latest
-    KIT_PASTEL_TRAEFIK_HOST: pastel.kit.pivoine.art
-    KIT_STIRLING_IMAGE: frooodle/s-pdf:latest
-    KIT_STIRLING_TRAEFIK_HOST: stirling.kit.pivoine.art
-    KIT_UNITS_IMAGE: ghcr.io/valknarness/units-ui:latest
-    KIT_UNITS_TRAEFIK_HOST: units.kit.pivoine.art
-    KIT_DRAW_IMAGE: excalidraw/excalidraw:latest
-    KIT_DRAW_TRAEFIK_HOST: draw.kit.pivoine.art
-    KIT_FIGLET_IMAGE: ghcr.io/valknarness/figlet-ui:latest
-    KIT_FIGLET_TRAEFIK_HOST: figlet.kit.pivoine.art
     # Jellyfin
     JELLY_TRAEFIK_ENABLED: true
     JELLY_COMPOSE_PROJECT_NAME: jelly
diff --git a/compose.yaml b/compose.yaml
index 4db26e9..630964e 100644
--- a/compose.yaml
+++ b/compose.yaml
@@ -9,7 +9,6 @@ include:
   - links/compose.yaml
   - vault/compose.yaml
   - joplin/compose.yaml
-  - kit/compose.yaml
   - drop/compose.yaml
   - ai/compose.yaml
   - asciinema/compose.yaml
diff --git a/kit/compose.yaml b/kit/compose.yaml
deleted file mode 100644
index 797a164..0000000
--- a/kit/compose.yaml
+++ /dev/null
@@ -1,206 +0,0 @@
-services:
-  landing:
-    image: ${KIT_LANDING_IMAGE:-ghcr.io/valknarness/kit-ui:latest}
-    container_name: ${KIT_COMPOSE_PROJECT_NAME}_landing
-    restart: unless-stopped
-    networks:
-      - compose_network
-    labels:
-      - 'traefik.enable=${KIT_TRAEFIK_ENABLED}'
-      # HTTP to HTTPS redirect
-      - 'traefik.http.middlewares.${KIT_COMPOSE_PROJECT_NAME}-landing-redirect-web-secure.redirectscheme.scheme=https'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-landing-web.middlewares=${KIT_COMPOSE_PROJECT_NAME}-landing-redirect-web-secure'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-landing-web.rule=Host(`${KIT_TRAEFIK_HOST}`)'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-landing-web.entrypoints=web'
-      # HTTPS router
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-landing-web-secure.rule=Host(`${KIT_TRAEFIK_HOST}`)'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-landing-web-secure.tls.certresolver=resolver'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-landing-web-secure.entrypoints=web-secure'
-      - 'traefik.http.middlewares.${KIT_COMPOSE_PROJECT_NAME}-landing-compress.compress=true'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-landing-web-secure.middlewares=${KIT_COMPOSE_PROJECT_NAME}-landing-compress,security-headers@file'
-      # Service
-      - 'traefik.http.services.${KIT_COMPOSE_PROJECT_NAME}-landing.loadbalancer.server.port=80'
-      - 'traefik.docker.network=${NETWORK_NAME}'
-      # Watchtower
-      - 'com.centurylinklabs.watchtower.enable=${WATCHTOWER_LABEL_ENABLE}'
-
-  vert:
-    image: ${KIT_VERT_IMAGE:-ghcr.io/vert-sh/vert:latest}
-    container_name: ${KIT_COMPOSE_PROJECT_NAME}_vert
-    restart: unless-stopped
-    environment:
-      PUB_HOSTNAME: ${KIT_VERT_TRAEFIK_HOST}
-      PUB_ENV: production
-      PUB_DISABLE_ALL_EXTERNAL_REQUESTS: true
-    networks:
-      - compose_network
-    labels:
-      - 'traefik.enable=${KIT_TRAEFIK_ENABLED}'
-      # HTTP to HTTPS redirect
-      - 'traefik.http.middlewares.${KIT_COMPOSE_PROJECT_NAME}-vert-redirect-web-secure.redirectscheme.scheme=https'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-vert-web.middlewares=${KIT_COMPOSE_PROJECT_NAME}-vert-redirect-web-secure'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-vert-web.rule=Host(`${KIT_VERT_TRAEFIK_HOST}`)'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-vert-web.entrypoints=web'
-      # HTTPS router with auth
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-vert-web-secure.rule=Host(`${KIT_VERT_TRAEFIK_HOST}`)'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-vert-web-secure.tls.certresolver=resolver'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-vert-web-secure.entrypoints=web-secure'
-      - 'traefik.http.middlewares.${KIT_COMPOSE_PROJECT_NAME}-vert-compress.compress=true'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-vert-web-secure.middlewares=${KIT_COMPOSE_PROJECT_NAME}-vert-compress,security-headers@file'
-      # Service
-      - 'traefik.http.services.${KIT_COMPOSE_PROJECT_NAME}-vert.loadbalancer.server.port=80'
-      - 'traefik.docker.network=${NETWORK_NAME}'
-      # Watchtower
-      - 'com.centurylinklabs.watchtower.enable=${WATCHTOWER_LABEL_ENABLE}'
-
-  pastel_api:
-    image: ${KIT_PASTEL_API_IMAGE:-ghcr.io/valknarness/pastel-api:latest}
-    container_name: ${KIT_COMPOSE_PROJECT_NAME}_pastel_api
-    restart: unless-stopped
-    healthcheck:
-      disable: true
-    networks:
-      - compose_network
-    labels:
-      # Watchtower
-      - 'com.centurylinklabs.watchtower.enable=${WATCHTOWER_LABEL_ENABLE}'
-
-  pastel_ui:
-    image: ${KIT_PASTEL_UI_IMAGE:-ghcr.io/valknarness/pastel-ui:latest}
-    container_name: ${KIT_COMPOSE_PROJECT_NAME}_pastel_ui
-    restart: unless-stopped
-    healthcheck:
-      disable: true
-    environment:
-      PASTEL_API_URL: http://pastel_api:3000
-    networks:
-      - compose_network
-    labels:
-      - 'traefik.enable=${KIT_TRAEFIK_ENABLED}'
-      # HTTP to HTTPS redirect
-      - 'traefik.http.middlewares.${KIT_COMPOSE_PROJECT_NAME}-pastel-ui-redirect-web-secure.redirectscheme.scheme=https'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-pastel-ui-web.middlewares=${KIT_COMPOSE_PROJECT_NAME}-pastel-ui-redirect-web-secure'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-pastel-ui-web.rule=Host(`${KIT_PASTEL_TRAEFIK_HOST}`)'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-pastel-ui-web.entrypoints=web'
-      # HTTPS router
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-pastel-ui-web-secure.rule=Host(`${KIT_PASTEL_TRAEFIK_HOST}`)'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-pastel-ui-web-secure.tls.certresolver=resolver'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-pastel-ui-web-secure.entrypoints=web-secure'
-      - 'traefik.http.middlewares.${KIT_COMPOSE_PROJECT_NAME}-pastel-ui-compress.compress=true'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-pastel-ui-web-secure.middlewares=${KIT_COMPOSE_PROJECT_NAME}-pastel-ui-compress,security-headers@file'
-      # Service
-      - 'traefik.http.services.${KIT_COMPOSE_PROJECT_NAME}-pastel-ui.loadbalancer.server.port=3000'
-      - 'traefik.docker.network=${NETWORK_NAME}'
-      # Watchtower
-      - 'com.centurylinklabs.watchtower.enable=${WATCHTOWER_LABEL_ENABLE}'
-
-  stirling:
-    image: ${KIT_STIRLING_IMAGE:-frooodle/s-pdf:latest}
-    container_name: ${KIT_COMPOSE_PROJECT_NAME}_stirling
-    restart: unless-stopped
-    networks:
-      - compose_network
-    labels:
-      - 'traefik.enable=${KIT_TRAEFIK_ENABLED}'
-      # HTTP to HTTPS redirect
-      - 'traefik.http.middlewares.${KIT_COMPOSE_PROJECT_NAME}-stirling-redirect-web-secure.redirectscheme.scheme=https'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-stirling-web.middlewares=${KIT_COMPOSE_PROJECT_NAME}-stirling-redirect-web-secure'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-stirling-web.rule=Host(`${KIT_STIRLING_TRAEFIK_HOST}`)'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-stirling-web.entrypoints=web'
-      # HTTPS router
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-stirling-web-secure.rule=Host(`${KIT_STIRLING_TRAEFIK_HOST}`)'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-stirling-web-secure.tls.certresolver=resolver'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-stirling-web-secure.entrypoints=web-secure'
-      - 'traefik.http.middlewares.${KIT_COMPOSE_PROJECT_NAME}-stirling-compress.compress=true'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-stirling-web-secure.middlewares=${KIT_COMPOSE_PROJECT_NAME}-stirling-compress,security-headers@file'
-      # Service
-      - 'traefik.http.services.${KIT_COMPOSE_PROJECT_NAME}-stirling.loadbalancer.server.port=8080'
-      - 'traefik.docker.network=${NETWORK_NAME}'
-      # Watchtower
-      - 'com.centurylinklabs.watchtower.enable=${WATCHTOWER_LABEL_ENABLE}'
-
-  units:
-    image: ${KIT_UNITS_IMAGE:-ghcr.io/valknarness/units-ui:latest}
-    container_name: ${KIT_COMPOSE_PROJECT_NAME}_units
-    restart: unless-stopped
-    healthcheck:
-      disable: true
-    networks:
-      - compose_network
-    labels:
-      - 'traefik.enable=${KIT_TRAEFIK_ENABLED}'
-      # HTTP to HTTPS redirect
-      - 'traefik.http.middlewares.${KIT_COMPOSE_PROJECT_NAME}-units-redirect-web-secure.redirectscheme.scheme=https'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-units-web.middlewares=${KIT_COMPOSE_PROJECT_NAME}-units-redirect-web-secure'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-units-web.rule=Host(`${KIT_UNITS_TRAEFIK_HOST}`)'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-units-web.entrypoints=web'
-      # HTTPS router
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-units-web-secure.rule=Host(`${KIT_UNITS_TRAEFIK_HOST}`)'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-units-web-secure.tls.certresolver=resolver'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-units-web-secure.entrypoints=web-secure'
-      - 'traefik.http.middlewares.${KIT_COMPOSE_PROJECT_NAME}-units-compress.compress=true'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-units-web-secure.middlewares=${KIT_COMPOSE_PROJECT_NAME}-units-compress,security-headers@file'
-      # Service
-      - 'traefik.http.services.${KIT_COMPOSE_PROJECT_NAME}-units.loadbalancer.server.port=80'
-      - 'traefik.docker.network=${NETWORK_NAME}'
-      # Watchtower
-      - 'com.centurylinklabs.watchtower.enable=${WATCHTOWER_LABEL_ENABLE}'
-
-  draw:
-    image: ${KIT_DRAW_IMAGE:-excalidraw/excalidraw:latest}
-    container_name: ${KIT_COMPOSE_PROJECT_NAME}_draw
-    restart: unless-stopped
-    healthcheck:
-      disable: true
-    networks:
-      - compose_network
-    labels:
-      - 'traefik.enable=${KIT_TRAEFIK_ENABLED}'
-      # HTTP to HTTPS redirect
-      - 'traefik.http.middlewares.${KIT_COMPOSE_PROJECT_NAME}-draw-redirect-web-secure.redirectscheme.scheme=https'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-draw-web.middlewares=${KIT_COMPOSE_PROJECT_NAME}-draw-redirect-web-secure'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-draw-web.rule=Host(`${KIT_DRAW_TRAEFIK_HOST}`)'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-draw-web.entrypoints=web'
-      # HTTPS router
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-draw-web-secure.rule=Host(`${KIT_DRAW_TRAEFIK_HOST}`)'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-draw-web-secure.tls.certresolver=resolver'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-draw-web-secure.entrypoints=web-secure'
-      - 'traefik.http.middlewares.${KIT_COMPOSE_PROJECT_NAME}-draw-compress.compress=true'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-draw-web-secure.middlewares=${KIT_COMPOSE_PROJECT_NAME}-draw-compress,security-headers@file'
-      # Service
-      - 'traefik.http.services.${KIT_COMPOSE_PROJECT_NAME}-draw.loadbalancer.server.port=80'
-      - 'traefik.docker.network=${NETWORK_NAME}'
-      # Watchtower
-      - 'com.centurylinklabs.watchtower.enable=${WATCHTOWER_LABEL_ENABLE}'
-
-  figlet:
-    image: ${KIT_FIGLET_IMAGE:-ghcr.io/valknarness/figlet-ui:latest}
-    container_name: ${KIT_COMPOSE_PROJECT_NAME}_figlet
-    restart: unless-stopped
-    healthcheck:
-      disable: true
-    networks:
-      - compose_network
-    labels:
-      - 'traefik.enable=${KIT_TRAEFIK_ENABLED}'
-      # HTTP to HTTPS redirect
-      - 'traefik.http.middlewares.${KIT_COMPOSE_PROJECT_NAME}-figlet-redirect-web-secure.redirectscheme.scheme=https'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-figlet-web.middlewares=${KIT_COMPOSE_PROJECT_NAME}-figlet-redirect-web-secure'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-figlet-web.rule=Host(`${KIT_FIGLET_TRAEFIK_HOST}`)'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-figlet-web.entrypoints=web'
-      # HTTPS router
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-figlet-web-secure.rule=Host(`${KIT_FIGLET_TRAEFIK_HOST}`)'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-figlet-web-secure.tls.certresolver=resolver'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-figlet-web-secure.entrypoints=web-secure'
-      - 'traefik.http.middlewares.${KIT_COMPOSE_PROJECT_NAME}-figlet-compress.compress=true'
-      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-figlet-web-secure.middlewares=${KIT_COMPOSE_PROJECT_NAME}-figlet-compress,security-headers@file'
-      # Service
-      - 'traefik.http.services.${KIT_COMPOSE_PROJECT_NAME}-figlet.loadbalancer.server.port=80'
-      - 'traefik.docker.network=${NETWORK_NAME}'
-      # Watchtower
-      - 'com.centurylinklabs.watchtower.enable=${WATCHTOWER_LABEL_ENABLE}'
-
-networks:
-  compose_network:
-    name: ${NETWORK_NAME}
-    external: true