From f05ad662d05293a7b796028aa5993a810e8f80ec Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Sebastian=20Kr=C3=BCger?= <valknar@pivoine.art>
Date: Mon, 17 Aug 2026 15:38:52 +0200
Subject: [PATCH] fix: correct real-world deployment details found while
 writing the stacks entry

- docker-compose.yml used "websecure" as the entrypoint name; the
  actual falcon_network convention (confirmed against the real
  traefik/compose.yml) is "web-secure". Also switched the networks
  block from a hardcoded falcon_network to the same
  compose_network-aliased ${NETWORK_NAME} pattern already used in the
  Traefik labels, instead of only half-respecting that variable.
- config.yml gave the Traefik widget an href, but this deployment runs
  with --api.dashboard=false - there's no dashboard to link to.
---
 config/.env.example |  1 -
 config/config.yml   |  4 ++--
 docker-compose.yml  | 10 ++++------
 3 files changed, 6 insertions(+), 9 deletions(-)

diff --git a/config/.env.example b/config/.env.example
index a6ed643..8ac9777 100644
--- a/config/.env.example
+++ b/config/.env.example
@@ -1,7 +1,6 @@
 # Public hostnames of the services PulseNode links to / monitors.
 # These are not secrets, but keeping them here (rather than hardcoded in
 # config.yml) means the same config.yml works across environments.
-TRAEFIK_HOST_TRAEFIK=traefik.example.com
 TRAEFIK_HOST_CODE=code.example.com
 TRAEFIK_HOST_COOLIFY=coolify.example.com
 TRAEFIK_HOST_GITEA=git.example.com
diff --git a/config/config.yml b/config/config.yml
index d46344f..f13db85 100644
--- a/config/config.yml
+++ b/config/config.yml
@@ -21,10 +21,10 @@ groups:
       - type: docker
         name: Traefik
         containerName: traefik
-        href: https://${TRAEFIK_HOST_TRAEFIK}
         interval: 10s
+        # No href: the dashboard is disabled (--api.dashboard=false).
         # Swap for a `traefik` widget (router/entrypoint/middleware view)
-        # once the API is enabled - see Traefik's --api.dashboard docs.
+        # if the API gets enabled - see Traefik's --api.dashboard docs.
 
       - type: docker
         name: Coolify
diff --git a/docker-compose.yml b/docker-compose.yml
index 9d2bd73..a20d534 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -24,7 +24,7 @@ services:
       - ./config:/app/config:ro
     env_file: .env
     networks:
-      - falcon_network
+      - compose_network
     labels:
       - traefik.enable=true
       - traefik.docker.network=${NETWORK_NAME}
@@ -33,11 +33,8 @@ services:
       - traefik.http.routers.pulsenode-web.entrypoints=web
       - traefik.http.routers.pulsenode-web.middlewares=pulsenode-redirect-web-secure
       - traefik.http.routers.pulsenode-web-secure.rule=Host(`${TRAEFIK_HOST}`)
-      - traefik.http.routers.pulsenode-web-secure.entrypoints=websecure
+      - traefik.http.routers.pulsenode-web-secure.entrypoints=web-secure
       - traefik.http.routers.pulsenode-web-secure.tls.certresolver=resolver
-      # Verify these entrypoint/middleware/certresolver names against
-      # traefik/dynamic/*.yaml in the stacks repo before deploying - written
-      # to match that repo's own convention, not independently confirmed.
       - traefik.http.routers.pulsenode-web-secure.middlewares=security-headers@file,no-index@file
       - traefik.http.services.pulsenode-web-secure.loadbalancer.server.port=3000
     healthcheck:
@@ -48,5 +45,6 @@ services:
       retries: 3
 
 networks:
-  falcon_network:
+  compose_network:
+    name: ${NETWORK_NAME}
     external: true