From 20fabf6e1ba921279cdd55f489f986bc69402039 Mon Sep 17 00:00:00 2001
From: Clemens Hering <clemens.hering@valtrix.systems>
Date: Thu, 6 Nov 2025 07:14:38 +0100
Subject: [PATCH] Added quadlet file for deploy

---
 deploy/valtrix-website.container | 38 ++++++++++++++++++++++++++++++++
 1 file changed, 38 insertions(+)
 create mode 100644 deploy/valtrix-website.container

diff --git a/deploy/valtrix-website.container b/deploy/valtrix-website.container
new file mode 100644
index 0000000..c21ed64
--- /dev/null
+++ b/deploy/valtrix-website.container
@@ -0,0 +1,38 @@
+[Unit]
+Description=Valtrix Website
+Requires=edge.network
+After=edge.network
+
+[Container]
+Image=localhost/valtrixweb
+ContainerName=valtrixwebsite
+Network=edge
+AutoUpdate=registry
+Environment=TZ=Europe/Berlin
+
+#Traefik Labels
+Label=traefik.enable=true
+Label=traefik.http.routers.wtw.rule=Host(`www.valtrix.systems`)
+Label=traefik.http.services.wtw.loadbalancer.server.port=3000
+Label=traefik.http.routers.wtw.entrypoints=websecure
+Label=traefik.http.routers.wtw.tls=true
+Label=traefik.http.routers.wtw.tls.certresolver=le
+
+Label=traefik.http.routers.wtw-http.rule=Host(`www.valtrix.systems`)
+Label=traefik.http.routers.wtw-http.entrypoints=web
+Label=traefik.http.routers.wtw-http.middlewares=wp-redirect
+Label=traefik.http.middlewares.wtw-redirect.redirectscheme.scheme=https
+Label=traefik.http.middlewares.wtw-redirect.redirectscheme.permanent=true
+Label=traefik.http.routers.wtw.middlewares=secure-headers@file
+
+Label="traefik.http.middlewares.wtw-sec.headers.customResponseHeaders.Content-Security-Policy=default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self'; script-src-elem 'self' 'unsafe-inline'; connect-src 'self' wss: https:; font-src 'self' data:; worker-src 'self' blob:;"
+Label=traefik.http.routers.wtw.middlewares=wtw-sec@docker
+Label=traefik.http.routers.wtw.middlewares=wtw-sec@docker
+Label="traefik.http.routers.wtw.middlewares=auth"
+Label="traefik.http.middlewares.auth.basicauth.users=smb:$apr1$H6uskkkW$IgXLP6ewTrSuBkTrqE8wj/"
+
+[Service]
+Restart=on-failure
+
+[Install]
+WantedBy=default.target
\ No newline at end of file