From f190abf85e6fb18fe9653969e7b019865cb437ef Mon Sep 17 00:00:00 2001
From: "Radu C. Martin" <radu.c.martin@gmail.com>
Date: Wed, 21 May 2025 09:48:48 +0200
Subject: [PATCH] feat: initial commit

---
 docker-compose.yml | 39 +++++++++++++++++++++++++++++++++++++++
 renovate.json      |  5 +++++
 2 files changed, 44 insertions(+)
 create mode 100644 docker-compose.yml
 create mode 100644 renovate.json

diff --git a/docker-compose.yml b/docker-compose.yml
new file mode 100644
index 0000000..49c42c5
--- /dev/null
+++ b/docker-compose.yml
@@ -0,0 +1,39 @@
+services:
+  linkstack:
+    # The version tags are not really friendly, unfortunately... so might as well follow latest
+    image: 'linkstackorg/linkstack:latest@sha256:abd691b4293b020a317de8794737671e0315159efcb868e8a4124d6f0611f7ae'
+    environment:
+      TZ: 'Europe/Zurich'
+      SERVER_ADMIN: '${DC_LINKSTACK_ADMIN_EMAIL:?}'
+      HTTP_SERVER_NAME: '${DC_LINKSTACK_HOSTNAME:?}'
+      LOG_LEVEL: 'info'
+      PHP_MEMORY_LIMIT: '256M'
+      UPLOAD_MAX_FILESIZE: '8M'
+    volumes:
+      - data:/htdocs
+    restart: unless-stopped
+
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.linkstack-ui.rule=Host(`${DC_LINKSTACK_HOSTNAME:?}`) || Host(`www.${DC_LINKSTACK_HOSTNAME:?}`)"
+      - "traefik.http.routers.linkstack-ui.entrypoints=websecure"
+      - "traefik.http.routers.linkstack-ui.tls=true"
+      - "traefik.http.routers.linkstack-ui.tls.certresolver=le"
+      - "traefik.http.routers.linkstack-ui.service=linkstack-ui"
+      - "traefik.http.services.linkstack-ui.loadBalancer.server.port=443"
+      - "traefik.http.services.linkstack-ui.loadbalancer.server.scheme=https"
+      - "traefik.http.routers.linkstack-ui.middlewares=linkstack-head"
+      - "traefik.http.middlewares.linkstack-head.headers.customrequestheaders.X-Forwarded-Proto=https"
+      - "traefik.http.middlewares.linkstack-head.headers.customResponseHeaders.X-Robots-Tag=none"
+      - "traefik.http.middlewares.linkstack-head.headers.customResponseHeaders.Strict-Transport-Security=max-age=63072000"
+      - "traefik.http.middlewares.linkstack-head.headers.stsSeconds=31536000"
+      - "traefik.http.middlewares.linkstack-head.headers.accesscontrolalloworiginlist=*"
+    networks:
+      - traefik
+
+volumes:
+  data:
+
+networks:
+  traefik:
+    external: true
diff --git a/renovate.json b/renovate.json
new file mode 100644
index 0000000..bb37008
--- /dev/null
+++ b/renovate.json
@@ -0,0 +1,5 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["local>renovate/renovate"],
+  "ignoreTests": true
+}