From e94cb91010be50c3a1e07e1162ff5e2b780fc984 Mon Sep 17 00:00:00 2001
From: fullsizemalt <106900403+fullsizemalt@users.noreply.github.com>
Date: Wed, 24 Dec 2025 09:58:41 -0800
Subject: [PATCH] fix(ops): add traefik network label to umami

---
 docker-compose.yml | 58 ++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 58 insertions(+)

diff --git a/docker-compose.yml b/docker-compose.yml
index c3400d6..4d5f452 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -36,6 +36,7 @@ services:
     networks:
       - elmeg
       - traefik-public
+      - postal-internal
     labels:
       - "traefik.enable=true"
       - "traefik.http.routers.elmeg-backend.rule=(Host(`elmeg.runfoo.run`) || Host(`elmeg.xyz`)) && PathPrefix(`/api`)"
@@ -98,9 +99,63 @@ services:
     networks:
       - elmeg
 
+  db-backup:
+    image: prodrigestivill/postgres-backup-local:15-alpine
+    restart: unless-stopped
+    volumes:
+      - ./backups:/backups
+      - postgres_data:/var/lib/postgresql/data:ro
+    environment:
+      - POSTGRES_HOST=db
+      - POSTGRES_DB=elmeg
+      - POSTGRES_USER=elmeg
+      - POSTGRES_PASSWORD=elmeg_password
+      - SCHEDULE=@daily
+      - BACKUP_KEEP_DAYS=7
+      - BACKUP_KEEP_WEEKS=4
+      - BACKUP_KEEP_MONTHS=6
+      - HEALTHCHECK_PORT=80
+    depends_on:
+      - db
+    networks:
+      - elmeg
+
+  umami:
+    image: ghcr.io/umami-software/umami:postgresql-latest
+    restart: unless-stopped
+    environment:
+      - DATABASE_URL=postgresql://umami:umami_password@umami-db:5432/umami
+      - APP_SECRET=${UMAMI_SECRET:-highly-secret-key-change-this}
+      - TRACKER_SCRIPT_NAME=stats
+    depends_on:
+      - umami-db
+    networks:
+      - elmeg
+      - traefik-public
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.elmeg-umami.rule=Host(`stats.elmeg.xyz`) || Host(`stats.elmeg.runfoo.run`)"
+      - "traefik.http.routers.elmeg-umami.entrypoints=websecure"
+      - "traefik.http.routers.elmeg-umami.tls.certresolver=letsencrypt"
+      - "traefik.http.services.elmeg-umami.loadbalancer.server.port=3000"
+      - "traefik.docker.network=${TRAEFIK_NETWORK:-traefik}"
+
+  umami-db:
+    image: postgres:15-alpine
+    environment:
+      - POSTGRES_USER=umami
+      - POSTGRES_PASSWORD=umami_password
+      - POSTGRES_DB=umami
+    volumes:
+      - umami_data:/var/lib/postgresql/data
+    restart: unless-stopped
+    networks:
+      - elmeg
+
 volumes:
   postgres_data:
   backend_data:
+  umami_data:
 
 
 networks:
@@ -108,3 +163,6 @@ networks:
   traefik-public:
     name: ${TRAEFIK_NETWORK:-traefik}
     external: true
+  postal-internal:
+    name: postal_postal-internal
+    external: true