Update traefik, introduce crowdsec, add hydra stack to infra.

hydra/docker-compose.yaml

@@ -0,0 +1,55 @@
+networks:
+  proxy:
+    external: true
+  hydra:
+
+volumes:
+  hydra-db:
+  hydra-storage:
+    name: hydra-storage
+
+services:
+  app:
+    image: gitea.fam-steinle.de/cs/hydra:latest
+    restart: always
+    dns:
+      - '8.8.8.8'
+    links:
+      - pgsql
+    depends_on:
+      pgsql:
+        condition: service_healthy
+    working_dir: /var/www
+    volumes:
+      - ./.env:/var/www/.env
+      - hydra-storage:/var/www/storage/app/private
+    networks:
+      - proxy
+      - hydra
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.hydra.rule=Host(`hydras-revenge.ddnss.org`) || Host(`hydra.steinle-computer.de`)"
+      - "traefik.http.routers.hydra.entrypoints=web"
+      - "traefik.http.routers.hydra.middlewares=hydra"
+      - "traefik.http.middlewares.hydra.redirectscheme.scheme=https"
+      - "traefik.http.routers.hydra-secure.rule=Host(`hydras-revenge.ddnss.org`) || Host(`hydra.steinle-computer.de`)"
+      - "traefik.http.routers.hydra-secure.entrypoints=websecure"
+      - "traefik.http.routers.hydra-secure.tls=true"
+      - "traefik.http.routers.hydra-secure.tls.certresolver=cs"
+      - "traefik.http.routers.hydra-secure.service=hydra-secure"
+      - "traefik.http.services.hydra-secure.loadbalancer.server.port=80"
+
+  pgsql:
+    image: postgres:17-alpine
+    restart: unless-stopped
+    volumes:
+      - hydra-db:/var/lib/postgresql/data
+    networks:
+      - hydra
+    environment:
+      PGPASSWORD: $*8D%!nnoiiu6w
+      POSTGRES_PASSWORD: $*8D%!nnoiiu6w
+      POSTGRES_USER: hydra
+      POSTGRES_DB: hydra
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U steinle"]