From 38b8fcecc311793eab853e967d001729d5f3a2a0 Mon Sep 17 00:00:00 2001
From: Alex Lebens <alexanderlebens@gmail.com>
Date: Thu, 23 Oct 2025 19:47:09 -0500
Subject: [PATCH] add local access

---
 hosts/ps10rp/blocky/config.yml   |  1 +
 hosts/ps10rp/garage/compose.yaml | 18 ++++++++++++++++--
 2 files changed, 17 insertions(+), 2 deletions(-)

diff --git a/hosts/ps10rp/blocky/config.yml b/hosts/ps10rp/blocky/config.yml
index 4bfbd263b..b1907b07a 100644
--- a/hosts/ps10rp/blocky/config.yml
+++ b/hosts/ps10rp/blocky/config.yml
@@ -43,6 +43,7 @@ customDNS:
 
     ;; Application Names
     traefik-ps10rp                  IN      CNAME   ps10rp
+    garage                          IN      CNAME   ps10rp
     gitea                           IN      CNAME   ps10rp
     www                             IN      CNAME   ps10rp
     homepage                        IN      CNAME   ps10rp
diff --git a/hosts/ps10rp/garage/compose.yaml b/hosts/ps10rp/garage/compose.yaml
index de9e7ff77..b36a75597 100644
--- a/hosts/ps10rp/garage/compose.yaml
+++ b/hosts/ps10rp/garage/compose.yaml
@@ -10,8 +10,8 @@ services:
             - TS_ENABLE_METRICS=true
             - TS_HOSTNAME=garage-ps10rp
             - TS_SERVE_CONFIG=/config/serve.json
-        network_mode: service:garage
         restart: always
+        network_mode: service:garage
         volumes:
             - tailscale:/var/lib/tailscale
             - ${PWD}/serve.json:/config/serve.json:ro
@@ -24,6 +24,8 @@ services:
         env_file:
             - .env
         restart: always
+        networks:
+            internal: null
         volumes:
             - ${PWD}/garage.toml:/etc/garage.toml:ro
             - meta:/var/lib/garage/meta
@@ -32,16 +34,28 @@ services:
     webui:
         image: khairul169/garage-webui:1.1.0
         container_name: garage-webui
-        network_mode: service:garage
         env_file:
             - .env
         environment:
             API_BASE_URL: "http://127.0.0.1:3903"
             S3_ENDPOINT_URL: "http://127.0.0.1:3900"
+        labels:
+            traefik.enable: true
+            traefik.docker.network: internal
+            traefik.http.routers.garage-webui.entrypoints: web-secure
+            traefik.http.routers.garage-webui.rule: Host(`garage.lebens-home.net`)
+            traefik.http.routers.garage-webui.service: garage-webui
+            traefik.http.services.garage-webui.loadbalancer.server.port: 3009
         restart: always
+        network_mode: service:garage
         volumes:
             - ${PWD}/garage.toml:/etc/garage.toml:ro
 
+networks:
+    internal:
+        name: internal
+        external: true
+
 volumes:
     tailscale:
     meta: