From e40a1b5e007ca1640fa61ebd2b5511280ab9c257 Mon Sep 17 00:00:00 2001
From: admin <alec@bryanmail.net>
Date: Tue, 30 Jun 2026 23:36:01 -0700
Subject: [PATCH] refactor(meshcentral): move to folder-based layout

---
 meshcentral/meshcentral.yaml | 37 ++++++++++++++++++++++++++++++++++++
 1 file changed, 37 insertions(+)
 create mode 100644 meshcentral/meshcentral.yaml

diff --git a/meshcentral/meshcentral.yaml b/meshcentral/meshcentral.yaml
new file mode 100644
index 0000000..e1866c5
--- /dev/null
+++ b/meshcentral/meshcentral.yaml
@@ -0,0 +1,37 @@
+version: '3'
+services:
+  meshcentral:
+    image: typhonragewind/meshcentral:latest
+    networks:
+      - traefik_backend
+    ports:
+      - 8086:443
+    environment:
+      - HOSTNAME=${MESHCENTRAL_HOST}
+      - REVERSE_PROXY=10.0.0.0/8
+      - REVERSE_PROXY_TLS_PORT=443
+      - IFRAME=false
+      - ALLOW_NEW_ACCOUNTS=false
+      - WEBRTC=false
+      - BACKUPS_PW=${BACKUPS_PW}
+      - BACKUP_INTERVAL=24
+      - BACKUP_KEEP_DAYS=10
+    volumes:
+      - /volume1/docker/meshcentral/data:/opt/meshcentral/meshcentral-data
+      - /volume1/docker/meshcentral/user_files:/opt/meshcentral/meshcentral-files
+      - /volume1/docker/meshcentral/backups:/opt/meshcentral/meshcentral-backups
+    deploy:
+      labels:
+        - traefik.enable=true
+        - traefik.http.routers.meshcentral.rule=Host(`${MESHCENTRAL_HOST}`)
+        - traefik.http.routers.meshcentral.tls=true
+        - traefik.http.routers.meshcentral.tls.certresolver=letsencrypt
+        - traefik.http.routers.meshcentral.entrypoints=websecure
+        - traefik.http.services.meshcentral.loadbalancer.server.port=443
+        - traefik.http.routers.meshcentral.middlewares=crowdsec@file
+        - traefik.swarm.network=traefik_backend
+        - traefik.http.services.meshcentral.loadbalancer.server.scheme=http
+
+networks:
+    traefik_backend:
+       external: true