adding it-tools because it's dumb cheap and half useful to have

social/prosody/docker-compose.yml

@@ -11,20 +11,13 @@ services:
             - ./data:/var/lib/prosody
             - ./certs:/etc/prosody/certs
 
-    # Watches Traefik's acme.json and extracts certs into the shared volume
-    prosody-certs:
+    # One-time init: dumps certs from Traefik's acme.json and makes them readable
+    certs-init:
         image: ldez/traefik-certs-dumper:latest
-        container_name: prosody-certs
-        restart: unless-stopped
+        container_name: prosody-certs-init
+        restart: "no"
         entrypoint: /bin/sh
-        command:
-            - "-c"
-            - |
-                printf '#!/bin/sh\nchmod 644 /output/certs/*.crt /output/private/*.key 2>/dev/null\nexit 0\n' > /tmp/on-cert-update.sh &&
-                chmod +x /tmp/on-cert-update.sh &&
-                traefik-certs-dumper file --version v2 --source /traefik/acme.json --dest /output &&
-                chmod 644 /output/certs/*.crt /output/private/*.key &&
-                exec traefik-certs-dumper file --watch --version v2 --source /traefik/acme.json --dest /output --post-hook /tmp/on-cert-update.sh
+        command: -c "traefik-certs-dumper file --version v2 --source /traefik/acme.json --dest /output && chmod 644 /output/certs/*.crt /output/private/*.key"
         volumes:
             - ../../tools/wireguard/letsencrypt:/traefik:ro # Change this to cert path if not using same folder structure
             - ./certs:/output
@@ -43,6 +36,8 @@ services:
         depends_on:
             prosody-init:
                 condition: service_completed_successfully
+            certs-init:
+                condition: service_completed_successfully
 
 networks:
     traefik_portal:

tools/it-tools/docker-compose.yml

@@ -0,0 +1,13 @@
+services:
+    it-tools:
+        image: corentinth/it-tools:latest
+        container_name: it-tools
+        restart: unless-stopped
+        ports:
+            - "7001:80"
+        networks:
+            - traefik_portal
+
+networks:
+    traefik_portal:
+        external: true