From 8468e900b67710f4a3dc0516ce71da1e15dd65d6 Mon Sep 17 00:00:00 2001
From: admin <admin@bryanmail.net>
Date: Mon, 22 Jun 2026 22:58:30 -0700
Subject: [PATCH] Add unifi.yaml to repo - test new stack-deploy.sh with env
 file containing special chars

---
 unifi.yaml | 97 ++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 97 insertions(+)
 create mode 100755 unifi.yaml

diff --git a/unifi.yaml b/unifi.yaml
new file mode 100755
index 0000000..63cdb74
--- /dev/null
+++ b/unifi.yaml
@@ -0,0 +1,97 @@
+services:
+  Unifi-Controller:
+    env_file:
+      - unifi.env
+    environment:
+      - PUID=${PUID}
+      - PGID=${PGID}
+      - TZ=PST
+      - RUNAS_UID0=false
+      - LOTSOFDEVICES=true
+#      - MEM_LIMIT=1024 #optional
+#      - MEM_STARTUP=1024 #optional
+    hostname: unifi
+    image: jacobalberty/unifi:latest
+#    restart: always
+    networks:
+      - traefik_backend
+    ports:
+      - target: 8443
+        published: 8443
+        protocol: tcp
+        mode: host
+      - target: 3478
+        published: 3478
+        protocol: udp
+        mode: host
+      - target: 10001
+        published: 10001
+        protocol: udp
+        mode: host
+      - target: 8080
+        published: 8080
+        protocol: tcp
+        mode: host
+      - target: 1900
+        published: 1900
+        protocol: udp
+        mode: host
+      - target: 8843
+        published: 8843
+        protocol: tcp
+        mode: host
+      - target: 8880
+        published: 8880
+        protocol: tcp
+        mode: host
+      - target: 6789
+        published: 6789
+        protocol: tcp
+        mode: host
+      - target: 5514
+        published: 5514
+        protocol: udp
+        mode: host
+    volumes:
+      - "/volume1/docker/Unifi:/unifi"
+#    working_dir: "/unifi"
+    deploy:
+      labels:
+        - traefik.enable=true
+        - traefik.http.routers.unifi-network.entrypoints=websecure
+        - traefik.http.routers.unifi-network.rule=${UNIFI_RULE}
+        - traefik.http.routers.unifi-network.tls=true
+        - traefik.http.routers.unifi-network.tls.certresolver=letsencrypt
+        - traefik.http.services.unifi-network.loadbalancer.server.port=8443
+#        - traefik.http.services.unifi-network.loadbalancer.serverstransport=ignorecert
+        - traefik.http.services.unifi-network.loadbalancer.server.scheme=https
+        - traefik.http.routers.unifi-network.service=unifi-network
+        - traefik.http.routers.unifi-network.middlewares=crowdsec@file #forwardAuth-authentik@file
+#        - traefik.http.routers.unifi-http.entrypoints=unifi-http
+#        - traefik.http.routers.unifi-http.rule=Host(`unifi.bryanmail.net`, `unifi.whooshh.net`)
+#        - traefik.http.routers.unifi-http.tls=false
+#        - traefik.http.routers.unifi-http.tls.certresolver=letsencrypt
+#        - traefik.http.services.unifi-http.loadbalancer.server.port=8080
+#        - traefik.http.routers.unifi-http.service=unifi-http
+#        - traefik.tcp.routers.unifi-http.entrypoints=unifi-http
+#        - traefik.tcp.routers.unifi-http.rule=HostSNI(`*`)
+#        - traefik.http.routers.unifi-http.tls=true
+#        - traefik.http.routers.unifi-http.tls.certresolver=letsencrypt
+#        - traefik.tcp.services.unifi-http.loadbalancer.server.port=8080
+#        - traefik.tcp.routers.unifi-http.service=unifi-http    
+#        - traefik.tcp.routers.unifi-stun.entrypoints=unifi-stun
+#        - traefik.tcp.routers.unifi-stun.rule=HostSNI(`*`)
+#        - traefik.tcp.services.unifi-stun.loadbalancer.server.port=3478
+#        - traefik.tcp.routers.unifi-stun.service=unifi-stun    
+        - traefik.swarm.network=backend
+        - autoheal=true
+      resources:
+        limits:
+          cpus: '4'
+          memory: 1G
+      placement:
+        constraints:
+           - node.hostname==docker-2
+networks:
+  traefik_backend:
+    external: true