add Jenkinsfile

.gitmodules

@@ -3,7 +3,4 @@
 	url = https://gitea.mindboost.team/Mindboost/mindboost-backend.git
 [submodule "apps/frontend/src"]
 	path = apps/frontend/src
-	url = https://gitea.mindboost.team/Mindboost/mindboost-webapp.git
+	url = https://gitea.mindboost.team/Mindboost/mindboost-webapp.git
-[submodule "apps/tools/invoiceninja/dockerfiles"]
-	path = apps/tools/invoiceninja/dockerfiles
-	url = https://github.com/invoiceninja/dockerfiles.git

Jenkinsfile

@@ -22,13 +22,5 @@ pipeline {
                 build job: 'frontend-pipeline', wait: true
             }
         }
-
-        stage('Deploy Infrastructure') {
-            steps {
-                sshagent(['jenkins-ssh-key']) {
-                    sh "ssh user@server 'cd /opt/myapp && git pull origin main && docker compose up -d'"
-                }
-            }
-        }
     }
 }

README.md

@@ -128,12 +128,6 @@ Our infrastructure uses a two-tier network model to enhance security and isolate
    - These networks are not directly accessible from the internet and provide secure communication between public and internal services.
    - Examples: backend_network, database_network, etc.
 
-Service Network Configuration:
-- Frontend: Connected to proxy_network and backend_network
-- Backend API: Connected to backend_network and database_network
-- Database: Connected only to database_network
-- Traefik: Connected only to proxy_network
-
 This structure ensures that:
 - The proxy (Traefik) can route traffic to public-facing services.
 - Internal services (like databases) are not directly accessible from the proxy network.
@@ -163,7 +157,7 @@ The `volumes/` folder contains subdirectories for different volumes used by vari
 
 Each subdirectory corresponds to a specific service or group of services, containing the persistent data that needs to be preserved across container restarts or redeployments. 
 
-When configuring Docker Compose files, reference these volume paths to ensure data persistence. For example:
+When configuring Docker Compose files, reference these volume paths to ensure data persistence.
 
 ```yaml
 volumes:

apps/develop/docker-compose.yml

@@ -1,9 +0,0 @@
-### Develop (./apps/develop/docker-compose.yml)
-# - [ ] Create services for Gitea, Jenkins, and Adminer
-# - [ ] Configure volumes for persistent storage of Git repositories, Jenkins data, and Adminer settings
-# - [ ] Set up environment variables using the new structure (../../env/${ENVIRONMENT:-development}/develop.env)
-# - [ ] Configure networking to allow these services to communicate with each other and the necessary application services
-# - [ ] Set up access controls and security measures for development tools
-
-include:
-  - ./gitea/docker-compose.yml

apps/develop/gitea/docker-compose.yml

@@ -1,44 +0,0 @@
-services:
-  gitea:
-    image: gitea/gitea:latest
-    container_name: ${INFRASTRUCTURE_LABEL:-mindboost}-gitea
-    profiles: ["all", "gitea","develop"]
-    restart: always
-    volumes:
-      - ${GITEA_VOLUME_PATH}:/data
-      - /etc/timezone:/etc/timezone:ro
-      - /etc/localtime:/etc/localtime:ro
-    depends_on:
-      - gitea_db
-    labels:
-      - "traefik.enable=${TRAEFIK_ENABLE}"
-      - "traefik.http.routers.gitea.entrypoints=${TRAEFIK_ENTRYPOINT}"
-      - "traefik.http.routers.gitea.rule=(Host(`${GITEA_DOMAIN})`)"
-      - "traefik.http.routers.gitea.tls=true"
-      - "traefik.http.routers.gitea.tls.certresolver=${TRAEFIK_CERT_RESOLVER}"
-      - "traefik.http.routers.gitea.service=gitea"
-      - 'traefik.http.services.gitea.loadbalancer.gitea.port=3000'
-      - "traefik.http.routers.gitea.tls.domains[0].main=`${GITEA_TLS_DOMAIN_MAIN}`"
-
-      # SSH routing, can't route based on host so anything to port 222 will come to this container
-      - "traefik.tcp.routers.gitea-ssh.rule=HostSNI(`*`)"
-      - "traefik.tcp.routers.gitea-ssh.entrypoints=ssh"
-      - "traefik.tcp.routers.gitea-ssh.service=gitea-ssh-svc"
-      - "traefik.tcp.services.gitea-ssh-svc.loadbalancer.gitea.port=22"
-
-  gitea_db:
-    image: mysql:latest
-    container_name: ${INFRASTRUCTURE_LABEL:-mindboost}-gitea_db
-    profiles: ["all", "gitea","develop"]
-    restart: always
-    environment:
-      - MYSQL_ROOT_PASSWORD=${GITEA_MYSQL_ROOT_PASSWORD}
-      - MYSQL_DATABASE=${GITEA_MYSQL_DATABASE}
-      - MYSQL_USER=${GITEA_MYSQL_USER}
-      - MYSQL_PASSWORD=${GITEA_MYSQL_PASSWORD}
-    volumes:
-      - ${GITEA_DATABASE_VOLUME_PATH}:/var/lib/mysql
-
-networks: 
-  gitea:
-    

apps/develop/jenkins/docker-compose.yml

@@ -1,40 +0,0 @@
-### Jenkins (./apps/frontend/docker-compose.yml)
-services:
-  jenkins:
-    image: jenkins/jenkins:lts
-    container_name: jenkins
-    ports:
-      - "50000:50000" # Jenkins Agent Port
-    volumes:
-      - ../../../volumes/develop/jenkins:/var/jenkins_home
-      - ./plugins.yml:/usr/share/jenkins/ref/plugins.yml
-    depends_on:
-      - jenkins-plugins
-    environment:
-      - JAVA_OPTS=-Djenkins.install.runSetupWizard=false
-    networks:
-      - proxy
-    labels:
-      - "traefik.enable=true"
-      - "traefik.http.routers.jenkins.rule=Host(`j.haslach2025.de`)"
-      - "traefik.http.routers.jenkins.entrypoints=websecure"
-      - "traefik.http.routers.jenkins.tls=true"
-      - "traefik.http.routers.jenkins.tls.certresolver=http_resolver"
-      - "traefik.http.services.jenkins.loadbalancer.server.port=8080" # interner Port von Jenkins
-      - "traefik.docker.network=proxy"
-
-  jenkins-plugins:
-    image: jenkins/jenkins:lts-jdk17
-    command: >
-      jenkins-plugin-cli -f /usr/share/jenkins/ref/plugins.yml --available-updates --output txt > /usr/share/jenkins/ref/plugins.yml
-    volumes:
-      - ./plugins.yml:/usr/share/jenkins/ref/plugins.yml
-    restart: "no"
-
-volumes:
-  jenkins_home:
-    driver: local
-
-networks:
-  proxy:
-    external: true

apps/docker-compose.all.yml

@@ -1,50 +0,0 @@
-##
-##      ONE SCRIPT TO RULE THEM ALL
-##
-##      Dieses Compose-File startet alle verfügbaren Services, abhängig von dem angegebenen ENVIRONMENT.
-
-##      Um diese Konfiguration zu verwenden, kannst du folgende Befehle nutzen:
-##      Um alle Services zu starten:
-##      docker compose -f docker-compose.all.yml --env-file ../env/.env.all --profile all up -d
-
-##      Um nur bestimmte Services zu starten (z.B. frontend und backend):
-##      docker compose -f docker-compose.all.yml --env-file ../env/.env.all --profile frontend --profile backend up -d
-
-##      
-##      Stellen Sie sicher, dass die .env.all Datei im angegebenen Verzeichnis existiert und den ENVIRONMENT Wert enthält.
-## 
-
-configs:
-  all:
-    file: ../env/.env.all
-include:
-  - path: ./proxy/docker-compose.yml
-    env_file: 
-      - ../env/.env.all
-      - ../env/${ENVIRONMENT:-development}/.env.proxy
-  - path: ./frontend/docker-compose.yml
-    env_file: 
-      - ../env/.env.all
-      - ../env/${ENVIRONMENT:-development}/.env.frontend
-  - path: ./backend/docker-compose.yml
-  - path: ./database/docker-compose.yml
-  - path: ./website/docker-compose.yml
-    env_file: 
-      - ../env/.env.all
-      - ../env/${ENVIRONMENT:-development}/.env.website
-      - ../env/${ENVIRONMENT:-development}/.env.proxy
-  - path: ./administration/docker-compose.yml
-    env_file: 
-      - ../env/.env.all
-      - ../env/${ENVIRONMENT:-development}/.env.administration
-      - ../env/${ENVIRONMENT:-development}/.env.proxy
-  - path: ./develop/docker-compose.yml
-    env_file: 
-      - ../env/.env.all
-      - ../env/${ENVIRONMENT:-development}/.env.develop
-      - ../env/${ENVIRONMENT:-development}/.env.proxy
-  - path: ./tools/docker-compose.yml
-    env_file: 
-      - ../env/.env.all
-      - ../env/${ENVIRONMENT:-development}/.env.tools
-      - ../env/${ENVIRONMENT:-development}/.env.proxy

apps/security/docker-compose.linuxserver.yml

@@ -1,30 +0,0 @@
-services:
-  wireguard:
-    image: linuxserver/wireguard
-    container_name: wireguard
-    cap_add:
-      - NET_ADMIN
-      - SYS_MODULE
-    environment:
-      - PUID=1000
-      - PGID=1000
-      - TZ=Europe/Berlin
-      - SERVERURL=${SERVER_IP:?"❌ ERROR = SERVERURL is not set. Run set-server-ip.sh first."}
-      - SERVERPORT=51820
-      - PEERS=3 # Number of VPN clients to generate
-      - PEERDNS=auto
-      - INTERNAL_SUBNET=22.22.22.0
-    volumes:
-      - ../../volumes/security/wireguard/config:/config
-      - /lib/modules:/lib/modules
-    ports:
-      - "51820:51820/udp"
-    sysctls:
-      - net.ipv4.conf.all.src_valid_mark=1
-    restart: unless-stopped
-    networks:
-      - wireguard_network
-
-networks:
-  wireguard_network:
-    driver: bridge

apps/security/docker-compose.yml

@@ -1,50 +0,0 @@
-volumes:
-  etc_wireguard:
-
-services:
-  wg-easy:
-    environment:
-      # Change Language:
-      # (Supports: en, ua, ru, tr, no, pl, fr, de, ca, es, ko, vi, nl, is, pt, chs, cht, it, th, hi, ja, si)
-      - LANG=${WG_LANG:-de}
-      # ⚠️ Required:
-      # Change this to your host's public address
-      - WG_HOST=${SERVER_IP:-localhost}
-
-      # Optional:
-      # - PASSWORD_HASH=$$2y$$10$$hBCoykrB95WSzuV4fafBzOHWKu9sbyVa34GJr8VV5R/pIelfEMYyG # (needs double $$, hash of 'foobar123'; see "How_to_generate_an_bcrypt_hash.md" for generate the hash)
-      # - PORT=51821
-      # - WG_PORT=51820
-      # - WG_CONFIG_PORT=92820
-      - WG_DEFAULT_ADDRESS=${WG_DEFAULT_ADDRESS:-22.22.22.0}
-      # - WG_DEFAULT_DNS=1.1.1.1
-      # - WG_MTU=1420
-      # - WG_ALLOWED_IPS=192.168.15.0/24, 10.0.1.0/24
-      # - WG_PERSISTENT_KEEPALIVE=25
-      # - WG_PRE_UP=echo "Pre Up" > /etc/wireguard/pre-up.txt
-      # - WG_POST_UP=echo "Post Up" > /etc/wireguard/post-up.txt
-      # - WG_PRE_DOWN=echo "Pre Down" > /etc/wireguard/pre-down.txt
-      # - WG_POST_DOWN=echo "Post Down" > /etc/wireguard/post-down.txt
-      # - UI_TRAFFIC_STATS=true
-      # - UI_CHART_TYPE=0 # (0 Charts disabled, 1 # Line chart, 2 # Area chart, 3 # Bar chart)
-      # - WG_ENABLE_ONE_TIME_LINKS=true
-      # - UI_ENABLE_SORT_CLIENTS=true
-      # - WG_ENABLE_EXPIRES_TIME=true
-      # - ENABLE_PROMETHEUS_METRICS=false
-      # - PROMETHEUS_METRICS_PASSWORD=$$2a$$12$$vkvKpeEAHD78gasyawIod.1leBMKg8sBwKW.pQyNsq78bXV3INf2G # (needs double $$, hash of 'prometheus_password'; see "How_to_generate_an_bcrypt_hash.md" for generate the hash)
-
-    image: ghcr.io/wg-easy/wg-easy
-    container_name: wg-easy
-    volumes:
-      - ../../volumes/wireguardeasy/:/etc/wireguard
-    ports:
-      - "51820:51820/udp"
-      - "51821:51821/tcp"
-    restart: unless-stopped
-    cap_add:
-      - NET_ADMIN
-      - SYS_MODULE
-      # - NET_RAW # ⚠️ Uncomment if using Podman
-    sysctls:
-      - net.ipv4.ip_forward=1
-      - net.ipv4.conf.all.src_valid_mark=1

apps/security/set-server-ip.sh

@@ -1,2 +0,0 @@
-#!/bin/bash
-export SERVER_IP=$(curl -s https://api.ipify.org)

apps/tools/docker-compose.yml

@@ -1,11 +0,0 @@
-### Tools (./apps/tools/docker-compose.yml)
-# - [ ] Create services for Nextcloud, LimeSurvey, and LinkStack
-# - [ ] Configure volumes for persistent storage of files, survey data, and link management data
-# - [ ] Set up environment variables using the new structure (../../env/${ENVIRONMENT:-development}/tools.env)
-# - [ ] Configure networking to expose these services to the internet via the proxy
-# - [ ] Set up regular backup jobs for critical data in these services
-
-include: 
-  - path: ./nextcloud/docker-compose.yml
-  - path: ./limesurvey/docker-compose.yml
-  - path: ./invoiceninja/dockerfiles/debian/docker-compose.yml

apps/tools/nextcloud/docker-compose.yml

@@ -1,59 +0,0 @@
-services:
-  nextcloud-db:
-    image: mariadb:10.6
-    container_name: ${INFRASTRUCTURE_LABEL:-default}-nextcloud-db-${ENVIRONMENT:-development}
-    profiles: ["all", "tools", "nextcloud"]
-    command: --transaction-isolation=READ-COMMITTED --innodb_read_only_compressed=OFF
-    restart: unless-stopped
-    volumes:
-      - /etc/localtime:/etc/localtime:ro
-      - /etc/timezone:/etc/timezone:ro
-      - ../../volumes/tools/${INFRASTRUCTURE_LABEL:-default}_cloud/database:/var/lib/mysql
-    environment:
-      - MYSQL_ROOT_PASSWORD=headpiece-constant1-denim-mindboost #SQL root Passwort eingeben
-      - MYSQL_PASSWORD=idealist9-frayed-murkiness-mindboost #SQL Benutzer Passwort eingeben
-      - MYSQL_DATABASE=nextcloud-mindboost #Datenbank Name
-      - MYSQL_USER=mindboostcloud #SQL Nutzername
-      - MYSQL_INITDB_SKIP_TZINFO=1
-      - MARIADB_AUTO_UPGRADE=1
-  nextcloud-redis:
-    image: redis:alpine
-    container_name: ${INFRASTRUCTURE_LABEL:-default}-nextcloud-redis-${ENVIRONMENT:-development} 
-    profiles: ["all", "tools", "nextcloud"]
-    hostname: nextcloud-redis
-    restart: unless-stopped
-    command: redis-server --requirepass redis-mindboost-passwort # Redis Passwort eingeben
-  cloud:
-    image: nextcloud
-    container_name: ${INFRASTRUCTURE_LABEL:-default}-nextcloud-app-${ENVIRONMENT:-development} 
-    profiles: ["all", "tools", "nextcloud"]
-    restart: unless-stopped
-    depends_on:
-      - nextcloud-db
-      - nextcloud-redis
-    environment:
-        TRUSTED_PROXIES: 172.16.255.254/16
-        OVERWRITEPROTOCOL: https
-        OVERWRITECLIURL: https://${CLOUD_DOMAIN:-cloud}
-        OVERWRITEHOST: ${CLOUD_DOMAIN:-cloud}
-        REDIS_HOST: nextcloud-redis
-        REDIS_HOST_PASSWORD: redis-mindboost-passwort # Redis Passwort von oben wieder eingeben
-    volumes:
-      - ../../volumes/tools/${INFRASTRUCTURE_LABEL:-default}_cloudapp/:/var/www/html/data
-    labels:
-      - "traefik.enable=true"
-      - "traefik.http.routers.${INFRASTRUCTURE_LABEL:-default}_cloud.entrypoints=websecure"
-      - "traefik.http.routers.${INFRASTRUCTURE_LABEL:-default}_cloud.rule=Host(`${CLOUD_DOMAIN}`)"
-      - "traefik.http.routers.${INFRASTRUCTURE_LABEL:-default}_cloud.tls=true"
-      - "traefik.http.routers.${INFRASTRUCTURE_LABEL:-default}_cloud.tls.certresolver=http_resolver"
-      - 'traefik.http.routers.${INFRASTRUCTURE_LABEL:-default}_cloud.service=cloud'
-      - "traefik.http.services.cloud.loadbalancer.server.port=80"
-      - "traefik.docker.network=${TRAEFIK_NETWORK:-default}"
-      - "traefik.http.routers.${INFRASTRUCTURE_LABEL:-default}_cloud.middlewares=nextcloud-dav,default@file"
-      - "traefik.http.middlewares.nextcloud-dav.replacepathregex.regex=^/.well-known/ca(l|rd)dav"
-      - "traefik.http.middlewares.nextcloud-dav.replacepathregex.replacement=/remote.php/dav/"
-    networks:
-      - ${TRAEFIK_NETWORK}
-networks:
-  nextcloud:
-    name: ${INFRASTRUCTURE_LABEL:-default}_nextcloud

apps/website/docker-compose.yml

@@ -1,32 +0,0 @@
-services:
-  kirbycms:
-    build:
-      context: ./kirby
-      dockerfile: Dockerfile
-    image: kirbycms
-    container_name: ${INFRASTRUCTURE_LABEL:-default}-kirbycms-${ENVIRONMENT:-development}
-    profiles: ["website","kirbycms","all"]
-    volumes:
-      - kirbycms_data:/var/www/html:rw # Persistente Daten
-    restart: unless-stopped
-    ports:
-      - 0:80
-    networks:
-      - ${TRAEFIK_NETWORK:-default}
-    labels:
-      - "traefik.enable=${TRAEFIK_ENABLE:-false}"
-      - "traefik.docker.network=${TRAEFIK_NETWORK:-default}"
-      - "traefik.http.routers.kirbycms.service=kirbycms"
-      - "traefik.http.routers.kirbycms.tls.certresolver=${TRAEFIK_CERT_RESOLVER:-default}"
-      - "traefik.http.routers.kirbycms.tls.domains[0].main=`${WEBSITE_DOMAIN:-kirby.local}`"
-      - "traefik.http.routers.kirbycms.rule=Host(`${WEBSITE_DOMAIN:-kirby.local}`)"
-      - "traefik.http.routers.kirbycms.entrypoints=${TRAEFIK_ENTRYPOINT:-default}"
-      - "traefik.http.routers.kirbycms.tls=true"
-      - "traefik.http.services.kirbycms.loadbalancer.server.port=80"
-volumes:
-  kirbycms_data:
-    driver: local
-    driver_opts:
-      type: none
-      o: bind
-      device: /mnt/docker-volumes/website/kirbycms  # Neuer fester Speicherort

apps/website/kirby/Dockerfile

@@ -1,49 +0,0 @@
-# Use latest offical ubuntu image
-FROM ubuntu:latest
-
-# Set timezone
-ENV TZ=Europe/Berlin
-
-# Set geographic area using above variable
-# This is necessary, otherwise building the image doesn't work
-RUN ln -snf /usr/share/zoneinfo/$TZ /etc/localtime && echo $TZ > /etc/timezone
-
-# Remove annoying messages during package installation
-ARG DEBIAN_FRONTEND=noninteractive
-
-# Install packages: web server & PHP plus extensions
-RUN apt-get update && apt-get install -y \
-  apache2 \
-  apache2-utils \
-  ca-certificates \
-  php \
-  libapache2-mod-php \
-  php-curl \
-  php-dom \
-  php-gd \
-  php-intl \
-  php-json \
-  php-mbstring \
-  php-xml \
-  php-zip && \
-  apt-get clean && rm -rf /var/lib/apt/lists/*
-
-# Copy virtual host configuration from current path onto existing 000-default.conf
-COPY default.conf /etc/apache2/sites-available/000-default.conf
-
-# Remove default content (existing index.html)
-RUN rm /var/www/html/*
-
-# Activate Apache modules headers & rewrite
-RUN a2enmod headers rewrite
-
-# Ensure Group Ownership for www-data every member of kirbygroup should edit files
-RUN groupadd -g 1003 kirbygroup && usermod -aG kirbygroup www-data
-RUN chown -R www-data:kirbygroup /var/www/html
-RUN chmod -R g+rw /var/www/html && find /var/www/html -type d -exec chmod g+xs {} \;
-
-# Tell container to listen to port 80 at runtime
-EXPOSE 80
-
-# Start Apache web server
-CMD [ "/usr/sbin/apache2ctl", "-DFOREGROUND" ]

apps/website/kirby/default.conf

@@ -1,9 +0,0 @@
-<VirtualHost *:80>
-    ServerName localhost
-    # Set the document root
-    DocumentRoot "/var/www/html"
-  <Directory "/var/www/html">
-    # Allow overriding the default configuration via `.htaccess`
-    AllowOverride All
-  </Directory>
-</VirtualHost>

apps/website/kirby/entrypoint.sh

@@ -1,7 +0,0 @@
-#!/bin/bash
-
-set -e -u
-
-[[ $USERID ]] && usermod --uid "${USERID}" www-data
-
-exec "$@"

apps/website/kirby/id.env

@@ -1 +0,0 @@
-USERID=0

env/.env.all

@@ -1,230 +0,0 @@
-##
-##  Einstellung die für das gesamte Projekt gelten. Also der Name und der Admin
-##  Das Environment muss "production","staging" oder "development" heißen
-
-INFRASTRUCTURE_LABEL=mindboost
-ENVIRONMENT=development
-
-ADMIN_USER=${INFRASTRUCTURE_LABEL:-default}_${ENVIRONMENT:-development}
-ADMIN_PASSWORD_HASH='$2y$05$U7noO29Ru/4VB5x8TpZo3.b4VjH6AAnhufJJUG2Vs7qHCM2Cd8yIK' # for development = admin
-
-SERVER_IP=127.0.0.1
-
-
-#################################################################################################
-#                                      🔧 ENVIRONMENT VARIABLES 🔧                               #
-#################################################################################################
-#
-# This file contains **default (fallback) values** for environment variables.
-# These values ensure that services run with sane defaults if no other configuration is provided.
-#
-# 📌 **ENVIRONMENT VARIABLE PRIORITY ORDER (Lowest to Highest)**
-#  1️⃣ **Fallback Values in the File** (Used only if no other source provides a value)
-#  2️⃣ **Global Defaults in `.env.all`** (Shared settings across all services)
-#  3️⃣ **Service-Specific `.env` Files** (Overrides per service group, e.g., `.env.backend`, `.env.proxy`)
-#  4️⃣ **Preloaded Shell Environment** (`export VAR=value` before running `docker compose`)
-#  5️⃣ **CLI Overrides** (`docker compose --env-file` or `-e VAR=value` → Highest Priority)
-#
-# 🔄 **Overwriting Behavior**
-# - Variables defined in **`.env.all`** override values in this file.
-# - Variables defined in **`.env.<service>`** (e.g., `.env.backend`) override `.env.all`.
-# - Variables explicitly **exported in the shell** take priority over all `.env` files.
-# - Variables passed via **CLI (`--env-file` or `-e VAR=value`)** have the **highest priority**.
-#
-# 🚀 **Key Takeaways**
-# ✅ Use `.env.all` for common values across environments.
-# ✅ Use `.env.<service>` for service-specific configurations.
-# ✅ If needed, manually override variables in the shell or CLI.
-#
-#################################################################################################
-
-## ______________________________________________________________________________________________
-##                                      SEVICE GROUP ADMINISTRATION
-## ______________________________________________________________________________________________
-
-# ----------------------------------
-# Portainer
-# ----------------------------------
-
-PORTAINER_IMAGE=portainer/portainer-ce:latest
-PORTAINER_DATA_PATH=../../../volumes/administration/portainer/data
-
-## ______________________________________________________________________________________________
-##                                      SEVICE GROUP DATABASE
-## ______________________________________________________________________________________________
-
-# ----------------------------------
-# Datenbank (MariaDB)
-# ----------------------------------
-MARIADB_USER=${INFRASTRUCTURE_LABEL:-default}_${ENVIRONMENT:-development}
-MARIADB_DATABASE=${INFRASTRUCTURE_LABEL:-default}_${ENVIRONMENT:-development}
-MARIADB_PASSWORD=${INFRASTRUCTURE_LABEL:-default}_${ENVIRONMENT:-development}
-MARIADB_ROOT_PASSWORD=${INFRASTRUCTURE_LABEL:-default}_${ENVIRONMENT:-development}-root
-
-MARIADB_PORT=3306
-MARIADB_HOST=${INFRASTRUCTURE_LABEL:-default}_database_${ENVIRONMENT:-development}
-
-
-## ______________________________________________________________________________________________
-##                                      SEVICE GROUP BACKEND
-## ______________________________________________________________________________________________
-
-# ----------------------------------
-# Redis
-# ----------------------------------
-REDIS_PASSWORD=laravel-redis-passwort
-REDIS_PORT=6379
-
-# ----------------------------------
-# Laravel Backend
-# ----------------------------------
-BACKEND_NETWORK=backend
-APP_NAME="mindboost backend - Compose Deployment"
-APP_URL=https://backend.local
-LARAVEL_PORT=8000
-LARAVEL_VITE_PORT=5173
-DB_HOST=${MARIADB_HOST:-mariadb}
-DB_PORT=${MARIADB_PORT:-3306}
-DB_PASSWORD=${MARIADB_PASSWORD:-default}
-DB_USERNAME=${MARIADB_USER:-default}
-DB_DATABASE=${MARIADB_DATABASE:-default}
-
-JWT_SECRET=zMtO8sgsnc4UixWSsYWE1pK9EdpNLzxNSoIPlUpTe6dDlarM3bu4cwM80tH3jA0F
-
-# ----------------------------------
-# Adminer
-# ----------------------------------
-ADMINER_PORT=8080
-
-
-## ______________________________________________________________________________________________
-##                                      SEVICE GROUP DEVELOP
-## ______________________________________________________________________________________________
-
-# ----------------------------------
-# GITEA AND GITEA DB
-# ----------------------------------
-
-USER_UID=1000
-USER_GID=1000
-
-GITEA_VOLUME_PATH=../../../volumes/develop/gitea/gitea
-GITEA_DATABASE_VOLUME_PATH=../../../volumes/develop/gitea/gitea_db
-
-GITEA_MYSQL_ROOT_PASSWORD=very-difficult-passwort-gitea
-GITEA_MYSQL_USER=gitea
-GITEA_MYSQL_PASSWORD=very-difficult-gitea
-GITEA_MYSQL_DATABASE=gitea
-GITEA_MYSQL_ALLOW_EMPTY_PASSWORD=true
-
-
-## ______________________________________________________________________________________________
-##                                      SEVICE GROUP FRONTEND
-## ______________________________________________________________________________________________
-
-# ----------------------------------
-# VUE APP
-# ----------------------------------
-
-BACKEND_URL="backend.local"
-
-## ______________________________________________________________________________________________
-##                                      SEVICE GROUP PROXY
-## ______________________________________________________________________________________________
-
-
-# ----------------------------------
-# TRAEFIK
-# ----------------------------------
-                  
-TRAEFIK_ENABLE=true
-TRAEFIK_NETWORK=proxy
-TRAEFIK_BASIC_AUTH_USERS=${ADMIN_USER:-admin}:${ADMIN_PASSWORD_HASH}
-TRAEFIK_CERT_RESOLVER=
-
-##              Domains when TRAEFIK is ENABLED
-
-PORTAINER_DOMAIN=portainer.local
-FRONTEND_DOMAIN=frontend.local
-FRONTEND_DOMAIN_2=app.frontend.local
-BACKEND_DOMAIN=backend.local
-WEBSITE_DOMAIN=web.local
-GITEA_DOMAIN=gitea.local
-LIMESURVEY_DOMAIN=survey.local
-LINKSTACK_DOMAIN=linkstack.local
-TRAEFIK_DOMAIN=traefik.local
-CLOUD_DOMAIN=cloud.local
-
-###              TLS for Domains
-
-PORTAINER_TLS_DOMAIN_MAIN=${PORTAINER_DOMAIN}
-FRONTEND_TLS_DOMAIN_MAIN=${FRONTEND_DOMAIN}
-FRONTEND_TLS_DOMAIN_SANS=${FRONTEND_DOMAIN_2}
-BACKEND_TLS_DOMAIN_MAIN=${BACKEND_DOMAIN}
-WEBSITE_TLS_DOMAIN_MAIN=${WEBSITE_DOMAIN}
-GITEA_TLS_DOMAIN_MAIN=${GITEA_DOMAIN}
-LIMESURVEY_TLS_DOMAIN_MAIN=${LIMESURVEY_DOMAIN}
-LINKSTACK_TLS_DOMAIN_MAIN=${LINKSTACK_DOMAIN}
-TRAEFIK_TLS_DOMAIN_MAIN=${TRAEFIK_DOMAIN}
-CLOUD_TLS_DOMAIN_MAIN=${CLOUD_DOMAIN}
-
-
-##                      MIDDLEWARES
-
-TRAEFIK_HTTPS_REDIRECT_MIDDLEWARE=${INFRASTRUCTURE_LABEL:-default}-https-redirect
-TRAEFIK_BASIC_AUTH_MIDDLEWARE=${INFRASTRUCTURE_LABEL:-default}-basic-auth
-
-
-##                      ENTRYPOINTS
-
-TRAEFIK_ENTRYPOINT=websecure
-TRAEFIK_ENTRYPOINT_HTTP=web
-
-
-## ______________________________________________________________________________________________
-##                                      SEVICE GROUP SECURITY
-## ______________________________________________________________________________________________
-
-# ----------------------------------
-# WIREGUARD
-# ----------------------------------
-WG_DEFAULT_ADDRESS=22.22.22.0
-WG_HOST=${SERVER_IP:-127.0.0.1}
-WG_LANG=de
-
-## ______________________________________________________________________________________________
-##                                      SEVICE GROUP TOOLS
-## ______________________________________________________________________________________________
-
-# ----------------------------------
-#  NEXTCLOUD DB
-# ----------------------------------
-
-MYSQL_ROOT_PASSWORD=headpiece-constant1-denim-mindboost #SQL root Passwort eingeben
-MYSQL_PASSWORD=idealist9-frayed-murkiness-mindboost #SQL Benutzer Passwort eingeben
-MYSQL_DATABASE=nextcloud-mindboost #Datenbank Name
-MYSQL_USER=mindboostcloud #SQL Nutzername
-MYSQL_INITDB_SKIP_TZINFO=1
-MARIADB_AUTO_UPGRADE=1
-
-# ----------------------------------
-#  NEXTCLOUD CLOUD
-# ----------------------------------
-
-TRUSTED_PROXIES=172.16.255.254/16
-OVERWRITEPROTOCOL=https
-OVERWRITECLIURL=https://${CLOUD_DOMAIN:-cloud}
-OVERWRITEHOST=${CLOUD_DOMAIN:-cloud}
-REDIS_HOST=nextcloud-redis
-REDIS_HOST_PASSWORD=redis-mindboost-passwort
-
-
-## ______________________________________________________________________________________________
-##                                      SEVICE GROUP WEBSITE
-## ______________________________________________________________________________________________
-
-# ----------------------------------
-#  KIRBY CMS
-# ----------------------------------
-
-KIRBY_USER_ID=0

env/development/.env.administration

@@ -1,7 +0,0 @@
-# ----------------------------------
-# Portainer
-# ----------------------------------
-
-PORTAINER_IMAGE=portainer/portainer-ce:latest
-PORTAINER_DATA_PATH=../../../volumes/administration/portainer/data
-

env/development/.env.backend

@@ -1,31 +0,0 @@
-
-
-# ----------------------------------
-# Redis
-# ----------------------------------
-REDIS_PASSWORD=laravel-redis-passwort
-REDIS_PORT=6379
-SERVER_IP=${SERVER_IP:-localhost}
-
-# ----------------------------------
-# Laravel Backend
-# ----------------------------------
-BACKEND_NETWORK=backend
-APP_ENV=${ENVIRONMENT-local}
-APP_NAME="mindboost backend - Compose Deployment"
-APP_URL=https://backend.local
-LARAVEL_PORT=8000
-LARAVEL_VITE_PORT=5173
-JWT_SECRET=zMtO8sgsnc4UixWSsYWE1pK9EdpNLzxNSoIPlUpTe6dDlarM3bu4cwM80tH3jA0F
-
-# ----------------------------------
-# Datenbank Zugriff - ! MUSS MIT .env.database übereinstimmen
-# ----------------------------------
-DB_HOST=database
-DB_PORT=3306
-DB_PASSWORD=1stronges-mindboostdb-passwort
-DB_USERNAME=${INFRASTRUCTURE_LABEL:-default}_${ENVIRONMENT:-development}
-DB_DATABASE=${INFRASTRUCTURE_LABEL:-default}_${ENVIRONMENT:-development}
-
-
-

env/development/.env.database

@@ -1,9 +0,0 @@
-# ----------------------------------
-# Datenbank (MariaDB)
-# ----------------------------------
-MARIADB_USER=${INFRASTRUCTURE_LABEL:-default}_${ENVIRONMENT:-development}
-MARIADB_DATABASE=${INFRASTRUCTURE_LABEL:-default}_${ENVIRONMENT:-development}
-MARIADB_ROOT_PASSWORD_FILE=/run/secrets/mariadb_root
-MARIADB_PASSWORD=1stronges-mindboostdb-passwort
-MARIADB_PORT=3306
-MARIADB_HOST=database

env/development/.env.develop

@@ -1,25 +0,0 @@
-# ----------------------------------
-# GITEA
-# ----------------------------------
-
-USER_UID=1000
-USER_GID=1000
-
-GITEA_VOLUME_PATH=../../../volumes/develop/gitea/gitea
-GITEA_DATABASE_VOLUME_PATH=../../../volumes/develop/gitea/gitea_db
-
-GITEA_MYSQL_ROOT_PASSWORD=very-difficult-passwort-gitea
-GITEA_MYSQL_USER=gitea
-GITEA_MYSQL_PASSWORD=very-difficult-gitea
-GITEA_MYSQL_DATABASE=gitea
-GITEA_MYSQL_ALLOW_EMPTY_PASSWORD=true
-
-# ----------------------------------
-# GITEA DB
-# ----------------------------------
-
-DB_HOST=gitea_db:3306
-DB_NAME=gitea
-DB_PASSWD=very-difficult-gitea
-DB_TYPE=mysql
-DB_USER=gitea

env/development/.env.frontend

@@ -1,4 +0,0 @@
-# ----------------------------------
-# VUE APP
-# ----------------------------------
-BACKEND_URL="backend.local"

env/development/.env.proxy

@@ -1,51 +0,0 @@
-# ----------------------------------
-# TRAEFIK
-# ----------------------------------
-
-TRAEFIK_ENABLE=true
-TRAEFIK_NETWORK=proxy
-TRAEFIK_BASIC_AUTH_USERS=${ADMIN_USER}:${ADMIN_PASSWORD_HASH}
-TRAEFIK_CERT_RESOLVER=
-
-##              Domains when TRAEFIK is ENABLED
-
-PORTAINER_DOMAIN=portainer.local
-FRONTEND_DOMAIN=frontend.local
-FRONTEND_DOMAIN_2=app.frontend.local
-BACKEND_DOMAIN=backend.local
-WEBSITE_DOMAIN=web.local
-ADMINER_DOMAIN=adminer.local
-GITEA_DOMAIN=gitea.local
-LIMESURVEY_DOMAIN=survey.local
-LINKSTACK_DOMAIN=linkstack.local
-TRAEFIK_DOMAIN=traefik.local
-CLOUD_DOMAIN=cloud.local
-KILLBILL_DOMAIN=killbill.local
-
-###              TLS for Domains
-
-PORTAINER_TLS_DOMAIN_MAIN=${PORTAINER_DOMAIN}
-FRONTEND_TLS_DOMAIN_MAIN=${FRONTEND_DOMAIN}
-FRONTEND_TLS_DOMAIN_SANS=${FRONTEND_DOMAIN_2}
-BACKEND_TLS_DOMAIN_MAIN=${BACKEND_DOMAIN}
-WEBSITE_TLS_DOMAIN_MAIN=${WEBSITE_DOMAIN}
-GITEA_TLS_DOMAIN_MAIN=${GITEA_DOMAIN}
-LIMESURVEY_TLS_DOMAIN_MAIN=${LIMESURVEY_DOMAIN}
-LINKSTACK_TLS_DOMAIN_MAIN=${LINKSTACK_DOMAIN}
-TRAEFIK_TLS_DOMAIN_MAIN=${TRAEFIK_DOMAIN}
-CLOUD_TLS_DOMAIN_MAIN=${CLOUD_DOMAIN}
-KILLBILL_TLS_DOMAIN_MAIN=${KILLBILL_DOMAIN}
-
-
-##                      MIDDLEWARES
-
-TRAEFIK_HTTPS_REDIRECT_MIDDLEWARE=${INFRASTRUCTURE_LABEL:-default}-https-redirect
-TRAEFIK_BASIC_AUTH_MIDDLEWARE=${INFRASTRUCTURE_LABEL:-default}-basic-auth
-
-
-##                      ENTRYPOINTS
-
-TRAEFIK_ENTRYPOINT=websecure
-TRAEFIK_ENTRYPOINT_HTTP=web
-
-

env/development/.env.tools

@@ -1,29 +0,0 @@
-# ----------------------------------
-#  NEXTCLOUD DB
-# ----------------------------------
-
-MYSQL_ROOT_PASSWORD=headpiece-constant1-denim-mindboost #SQL root Passwort eingeben
-MYSQL_PASSWORD=idealist9-frayed-murkiness-mindboost #SQL Benutzer Passwort eingeben
-MYSQL_DATABASE=nextcloud-mindboost #Datenbank Name
-MYSQL_USER=mindboostcloud #SQL Nutzername
-MYSQL_INITDB_SKIP_TZINFO=1
-MARIADB_AUTO_UPGRADE=1
-
-# ----------------------------------
-#  NEXTCLOUD CLOUD
-# ----------------------------------
-
-TRUSTED_PROXIES=172.16.255.254/16
-OVERWRITEPROTOCOL=https
-OVERWRITECLIURL=https://${CLOUD_DOMAIN:-cloud}
-OVERWRITEHOST=${CLOUD_DOMAIN:-cloud}
-REDIS_HOST=nextcloud-redis
-REDIS_HOST_PASSWORD=redis-mindboost-passwort
-
-# ----------------------------------
-#  KILLBILL PAYMENT
-# ----------------------------------
-
-KILLBILL_DAO_URL=jdbc:mysql://db:3306/killbill
-KILLBILL_DAO_USER=${ADMIN_USER:-root}
-KILLBILL_DAO_PASSWORD=${ADMIN_PASSWORD_HASH}

env/development/.env.website

@@ -1,5 +0,0 @@
-# ----------------------------------
-#  KIRBY CMS
-# ----------------------------------
-
-USER_ID=0

env/production/.env.backend

@@ -1 +0,0 @@
-${REDIS_PASSWORD}

env/production/.env.database

@@ -1,7 +0,0 @@
-# ----------------------------------
-# Datenbank (MariaDB)
-# ----------------------------------
-MARIADB_USER=${INFRASTRUCTURE_LABEL:-default}_${ENVIRONMENT:-development}
-MARIADB_DATABASE=${INFRASTRUCTURE_LABEL:-default}_${ENVIRONMENT:-development}
-MARIADB_PASSWORD=1stronges-mindboostdb-passwort
-MARIADB_ROOT_PASSWORD=1stronges-passwort-fuer-diedb

env/production/.env.develop

@@ -1 +0,0 @@
-ADMINER_PORT=8000

env/production/.env.portainer

@@ -1,3 +0,0 @@
-PORTAINER_IMAGE=portainer/portainer-ce:latest
-PORTAINER_DATA_PATH=/opt/containers/portainer/data
-PORTAINER_DOMAIN=portainer.yourdomain.com

env/production/.env.proxy

@@ -1,32 +0,0 @@
-TRAEFIK_HTTPS_REDIRECT_MIDDLEWARE=${INFRASTRUCTURE_LABEL:-default}-https-redirect
-TRAEFIK_BASIC_AUTH_MIDDLEWARE=${INFRASTRUCTURE_LABEL:-default}-basic-auth
-TRAEFIK_BASIC_AUTH_USERS=${ADMIN_USER}:${ADMIN_PASSWORD_HASH}
-
-# Service Crowdsec
-SERVICES_CROWDSEC_CONTAINER_NAME=crowdsec
-SERVICES_CROWDSEC_HOSTNAME=crowdsec
-SERVICES_CROWDSEC_IMAGE=crowdsecurity/crowdsec
-SERVICES_CROWDSEC_IMAGE_VERSION=latest
-SERVICES_CROWDSEC_NETWORKS_CROWDSEC_IPV4=172.31.254.254
-
-# Service Traefik
-SERVICES_TRAEFIK_CONTAINER_NAME=${INFRASTRUCTURE_LABEL:-default}-traefik
-SERVICES_TRAEFIK_HOSTNAME=${INFRASTRUCTURE_LABEL:-default}-traefik
-SERVICES_TRAEFIK_IMAGE=traefik
-SERVICES_TRAEFIK_IMAGE_VERSION=2.11
-SERVICES_TRAEFIK_LABELS_TRAEFIK_HOST=`traefik.haslach2025.de`
-SERVICES_TRAEFIK_NETWORKS_CROWDSEC_IPV4=172.31.254.253
-SERVICES_TRAEFIK_NETWORKS_PROXY_IPV4=172.30.255.254
-
-# Service Traefik Crowdsec Bouncer
-SERVICES_TRAEFIK_CROWDSEC_BOUNCER_CONTAINER_NAME=traefik_crowdsec_bouncer
-SERVICES_TRAEFIK_CROWDSEC_BOUNCER_HOSTNAME=traefik-crowdsec-bouncer
-SERVICES_TRAEFIK_CROWDSEC_BOUNCER_IMAGE=fbonalair/traefik-crowdsec-bouncer
-SERVICES_TRAEFIK_CROWDSEC_BOUNCER_IMAGE_VERSION=latest
-SERVICES_TRAEFIK_CROWDSEC_BOUNCER_NETWORKS_CROWDSEC_IPV4=172.31.254.252
-
-# Netzwerkeinstellungen
-NETWORKS_PROXY_NAME=proxy
-NETWORKS_PROXY_SUBNET_IPV4=172.30.0.0/16
-NETWORKS_CROWDSEC_NAME=crowdsec
-NETWORKS_CROWDSEC_SUBNET_IPV4=172.31.0.0/16

env/staging/.env.administration

@@ -1,6 +0,0 @@
-
-
-# ----------------------------------
-# Portainer
-# ----------------------------------
-

env/staging/.env.backend

@@ -1,15 +0,0 @@
-
-
-# ----------------------------------
-# Redis
-# ----------------------------------
-
-
-# ----------------------------------
-# Laravel Backend
-# ----------------------------------
-
-
-# ----------------------------------
-# Adminer
-# ----------------------------------

env/staging/.env.database

@@ -1,3 +0,0 @@
-# ----------------------------------
-# Datenbank (MariaDB)
-# ----------------------------------

env/staging/.env.develop

@@ -1,9 +0,0 @@
-# ----------------------------------
-# GITEA
-# ----------------------------------
-
-
-
-# ----------------------------------
-# GITEA DB
-# ----------------------------------

env/staging/.env.frontend

@@ -1,3 +0,0 @@
-# ----------------------------------
-# VUE APP
-# ----------------------------------

env/staging/.env.proxy

@@ -1,4 +0,0 @@
-# ----------------------------------
-# TRAEFIK
-# ----------------------------------
-

env/staging/.env.tools

@@ -1,9 +0,0 @@
-# ----------------------------------
-#  NEXTCLOUD DB
-# ----------------------------------
-
-
-
-# ----------------------------------
-#  NEXTCLOUD CLOUD
-# ----------------------------------

env/staging/.env.website

@@ -1,4 +0,0 @@
-# ----------------------------------
-#  KIRBY CMS
-# ----------------------------------
-

scripts/debug/deploy-backend.sh

@@ -0,0 +1,3 @@
+source ./../setup/set-global-env.sh
+chmod +x ./../../apps/backend/src/entrypoint.sh
+docker compose -f ./../../apps/backend/docker-compose.overwrite.yml --env-file ./../../env/${ENVIRONMENT}/.env.database --env-file ./../../env/${ENVIRONMENT}/.env.backend --profile backend up

scripts/setup/set-global-env.sh

@@ -4,7 +4,18 @@
 # Stelle sicher, dass ROOT_DIR gesetzt ist
 if [ -z "$ROOT_DIR" ]; then
     echo "❌ WARN: ROOT_DIR ist nicht gesetzt! Setze ROOT_DIR..."
-    source ./set-project-root.sh
+    # Bestimme das Root-Verzeichnis des Git-Repos
+    ROOT_DIR=$(git rev-parse --show-toplevel 2>/dev/null)
+
+    # Falls das Repository nicht gefunden wurde, abbrechen
+    if [ -z "$ROOT_DIR" ]; then
+        echo "❌ Fehler: Kein Git-Repository gefunden!"
+        exit 1
+    fi
+
+    # Setze die Variable für die aktuelle Shell-Sitzung
+    export ROOT_DIR
+    echo "✅ ROOT_DIR gesetzt auf: $ROOT_DIR"
 fi
 
 # Setze den Pfad zur .env.all Datei relativ zum Projekt-Root

scripts/start/deploy-all.sh

@@ -1,4 +1,9 @@
 #!/bin/bash
+source ../setup/set-project-root.sh
+source ../setup/set-global-env.sh
+source ../setup/set-proxy-env.sh
+source ../setup/generate-secrets.sh
+
 
 # Pfad zur .env.all Datei
 ENV_FILE="../../env/.env.all"

scripts/start/deploy-app.sh

@@ -1,4 +1,8 @@
 #!/bin/bash
+source ../setup/set-project-root.sh
+source ../setup/set-global-env.sh
+source ../setup/set-proxy-env.sh
+source ../setup/generate-secrets.sh
 
 # Pfad zur .env.all Datei
 ENV_FILE="../../env/.env.all"
@@ -13,7 +17,7 @@ ENVIRONMENT=$(get_env_var "ENVIRONMENT")
 SERVER_IP=$(curl -s https://api.ipify.org)
 
 # Liste aller Stacks
-STACKS=("frontend" "database" "backend")
+STACKS=("proxy" "frontend" "database" "backend")
 
 # Liste aller Environments
 ENVIRONMENTS=("development" "staging" "production")
@@ -44,7 +48,7 @@ else
 fi
 
 # Ausgabe der Variablen
-echo "Deploying to:"
+echo "Deploying to"
 echo "INFRASTRUCTURE: ${INFRASTRUCTURE:-Not set}"
 echo "ENVIRONMENT: ${ENVIRONMENT:-Not set}"
 echo "-----------------------------------"
@@ -57,5 +61,5 @@ fi
 
 
 # Ausführen des Docker Compose Befehls
-docker compose -f ../../apps/docker-compose.all.yml --env-file ../../env/.env.all -p ${INFRASTRUCTURE:-my} --profile app up --remove-orphans $BUILD_OPTION
+docker compose -f ../../apps/docker-compose.all.yml -p ${INFRASTRUCTURE:-my} --profile app up --remove-orphans $BUILD_OPTION
 

scripts/start/deploy-backend.sh

@@ -0,0 +1,3 @@
+source ./../setup/set-global-env.sh
+chmod +x ./../../apps/backend/src/entrypoint.sh
+docker compose -f ./../../apps/backend/docker-compose.yml --env-file ./../../env/${ENVIRONMENT}/.env.database --env-file ./../../env/${ENVIRONMENT}/.env.backend --profile backend up

scripts/start/deploy-traefik.sh

@@ -3,7 +3,7 @@ set -e
 
 # Funktion zur Überprüfung der Produktivumgebung
 is_production() {
-    local prod_ip="85.215.56.185"  # IP-Adresse deines Produktivservers
+    local prod_ip=${SERVER_IP:-127.0.0.1} # IP-Adresse deines Produktivservers
     local current_ip
 
     # Überprüfe das Betriebssystem
@@ -69,30 +69,27 @@ if ! docker ps --format '{{.Names}}' | grep -q 'traefik'; then
         echo "Wir befinden uns in der Produktivumgebung."
         echo "Starte Traefik und CrowdSec Bouncer mit docker-compose.traefik.prod.yml..."
         env | grep DOMAIN  # Debug: Zeige die gesetzten Umgebungsvariablen an
-        docker compose -f ../apps/proxy/docker-compose.traefik.prod.yml up -d
+        docker compose -f ../../apps/proxy/docker-compose.yml  --env-file ../../env/.env.all --env-file ../../env/${ENVIRONMENT:-development}/.env.proxy --profile proxy up --remove-orphans -d
     else
         echo "Wir befinden uns in der lokalen Entwicklungsumgebung."
         echo "Starte Traefik und CrowdSec Bouncer mit docker-compose.traefik.local.yml..."
         env | grep DOMAIN  # Debug: Zeige die gesetzten Umgebungsvariablen an
-        docker compose -f ../apps/docker-compose.traefik.local.yml up -d
+        docker compose -f ../../apps/proxy/docker-compose.overwrite.yml  --env-file ../../env/.env.all --env-file ../../env/${ENVIRONMENT:-development}/.env.proxy --profile proxy up --remove-orphans -d
     fi
 else
     echo "Traefik läuft bereits. Aktualisiere die Konfiguration..."
     
     if is_production; then
         echo "Aktualisiere Traefik und CrowdSec Bouncer in der Produktivumgebung..."
-        docker compose -f ../apps/docker-compose.traefik.prod.yml up -d
+        docker compose -f ../../apps/proxy/docker-compose.yml  --env-file ../../env/.env.all --env-file ../../env/${ENVIRONMENT:-development}/.env.proxy --profile proxy up --remove-orphans -d
     else
         echo "Aktualisiere Traefik und CrowdSec Bouncer in der lokalen Umgebung..."
-        docker compose -f ../apps/docker-compose.traefik.local.yml up -d
+        docker compose -f ../../apps/proxy/docker-compose.overwrite.yml  --env-file ../../env/.env.all --env-file ../../env/${ENVIRONMENT:-development}/.env.proxy --profile proxy up --remove-orphans -d
     fi
 fi
 
 echo "Traefik und CrowdSec Bouncer Deployment abgeschlossen."
 
-=================
-
-
 echo "Prüfe, ob Traefik läuft..."
 
 set_environment_variables
@@ -106,14 +103,14 @@ fi
 
 if is_production; then
     echo "Wir befinden uns in der Produktivumgebung."
-    echo "Starte/Aktualisiere Deployment mit docker-compose.prod.yml..."
+    echo "Starte/Aktualisiere Deployment mit docker-compose.yml..."
     env | grep DOMAIN  # Debug: Zeige die gesetzten Umgebungsvariablen an
-    docker compose -f ../apps/docker-compose.prod.yml up -d
+    docker compose -f ../../apps/proxy/docker-compose.yml  --env-file ../../env/.env.all --env-file ../../env/${ENVIRONMENT:-development}/.env.proxy --profile proxy up --remove-orphans -d
 else
     echo "Wir befinden uns in der lokalen Entwicklungsumgebung."
     echo "Starte/Aktualisiere lokale Version mit docker-compose.overwrite.yml..."
     env | grep DOMAIN  # Debug: Zeige die gesetzten Umgebungsvariablen an
-    docker compose -f ../apps/docker-compose.overwrite.yml up -d
+    docker compose -f ../../apps/proxy/docker-compose.overwrite.yml  --env-file ../../env/.env.all --env-file ../../env/${ENVIRONMENT:-development}/.env.proxy --profile proxy up --remove-orphans -d
 fi
 
 
@@ -123,9 +120,9 @@ if ! docker ps --format '{{.Names}}' | grep -q 'traefik'; then
     if is_production; then
         echo "Wir befinden uns in der Produktivumgebung."
         set_environment_variables
-        echo "Starte Deployment mit docker-compose.prod.yml..."
+        echo "Starte Deployment mit docker-compose.yml..."
         env | grep DOMAIN  # Debug: Zeige die gesetzten Umgebungsvariablen an
-        docker compose -f ../apps/docker-compose.prod.yml up -d
+        docker compose -f ../../apps/proxy/docker-compose.yml  --env-file ../../env/.env.all --env-file ../../env/${ENVIRONMENT:-development}/.env.proxy --profile proxy up --remove-orphans -d
     else
         echo "Wir befinden uns in der lokalen Entwicklungsumgebung."
         read -p "Möchtest du die lokale Version zum Debuggen (docker-compose.overwrite.yml) starten? (y/n): " answer
@@ -133,7 +130,7 @@ if ! docker ps --format '{{.Names}}' | grep -q 'traefik'; then
             echo "Starte lokale Version..."
             set_environment_variables
             env | grep DOMAIN  # Debug: Zeige die gesetzten Umgebungsvariablen an
-            docker compose -f ../apps/docker-compose.overwrite.yml up -d
+            docker compose -f ../../apps/proxy/docker-compose.overwrite.yml  --env-file ../../env/.env.all --env-file ../../env/${ENVIRONMENT:-development}/.env.proxy --profile proxy up --remove-orphans -d
         else
             echo "Deployment abgebrochen."
             exit 1
@@ -145,15 +142,15 @@ else
     if is_production; then
         echo "Wir befinden uns in der Produktivumgebung."
         set_environment_variables
-        echo "Aktualisiere Deployment mit docker-compose.prod.yml..."
+        echo "Aktualisiere Deployment mit docker-compose.yml..."
         env | grep DOMAIN  # Debug: Zeige die gesetzten Umgebungsvariablen an
-        docker compose -f ../apps/docker-compose.prod.yml up -d
+        docker compose -f ../../apps/proxy/docker-compose.yml  --env-file ../../env/.env.all --env-file ../../env/${ENVIRONMENT:-development}/.env.proxy --profile proxy up --remove-orphans -d
     else
         echo "Wir befinden uns in der lokalen Entwicklungsumgebung."
         set_environment_variables
         echo "Aktualisiere lokale Version mit docker-compose.overwrite.yml..."
         env | grep DOMAIN  # Debug: Zeige die gesetzten Umgebungsvariablen an
-        docker compose -f ../apps/docker-compose.overwrite.yml up -d
+        docker compose -f ../../apps/proxy/docker-compose.overwrite.yml  --env-file ../../env/.env.all --env-file ../../env/${ENVIRONMENT:-development}/.env.proxy --profile proxy up --remove-orphans -d
     fi
 fi
 

scripts/start/deploy.sh

@@ -0,0 +1,37 @@
+#!/bin/bash
+#!/bin/bash
+
+# Bestimme das Root-Verzeichnis des Git-Repos
+ROOT_DIR=$(git rev-parse --show-toplevel 2>/dev/null)
+
+# Falls das Repository nicht gefunden wurde, abbrechen
+if [ -z "$ROOT_DIR" ]; then
+    echo "❌ Fehler: Kein Git-Repository gefunden!"
+    exit 1
+fi
+
+# Setze die Variable für die aktuelle Shell-Sitzung
+echo "✅ ROOT_DIR gesetzt auf: $ROOT_DIR"
+
+# Pfad zur .env.all Datei
+ENV_FILE="${ROOT_DIR}/env/.env.all"
+echo $ENV_FILE
+# Funktion zum Auslesen von Variablen aus der .env.all Datei
+get_env_var() {
+    grep "^$1=" "$ENV_FILE" | cut -d '=' -f2
+}
+
+# Auslesen der INFRASTRUCTURE und ENVIRONMENT Variablen
+INFRASTRUCTURE=$(get_env_var "INFRASTRUCTURE_LABEL")
+ENVIRONMENT=$(get_env_var "ENVIRONMENT")
+SERVER_IP=$(curl -s https://api.ipify.org)
+
+
+# Ausgabe der Variablen
+echo "Deploying to:"
+echo "INFRASTRUCTURE: ${INFRASTRUCTURE:-Not set}"
+echo "ENVIRONMENT: ${ENVIRONMENT:-Not set}"
+echo "-----------------------------------"
+
+# Ausführen des Docker Compose Befehls
+docker compose -f ../../apps/docker-compose.all.yml -p ${INFRASTRUCTURE:-my} --env-file ${ENV_FILE} --env-file ${ROOT_DIR}/env/${ENVIRONMENT:-development}/.env.proxy --profile app up --remove-orphans