From 9e109095f0216074afcfc0e68d0c30df69d8faac Mon Sep 17 00:00:00 2001
From: Bertrand Benjamin <benjamin.bertrand@opytex.org>
Date: Thu, 13 Aug 2026 16:18:18 +0200
Subject: [PATCH] feat(stacks): migrate maintenant

---
 .../maintenant.opytex.org/docker-compose.yml  | 35 +++++++++++++++++++
 1 file changed, 35 insertions(+)
 create mode 100644 stacks/maintenant.opytex.org/docker-compose.yml

diff --git a/stacks/maintenant.opytex.org/docker-compose.yml b/stacks/maintenant.opytex.org/docker-compose.yml
new file mode 100644
index 0000000..925d621
--- /dev/null
+++ b/stacks/maintenant.opytex.org/docker-compose.yml
@@ -0,0 +1,35 @@
+services:
+  maintenant:
+    image: ghcr.io/kolapsis/maintenant:1.3.5
+    container_name: maintenant
+    restart: unless-stopped
+    read_only: true
+    security_opt:
+      - no-new-privileges:true
+    tmpfs:
+      - /tmp:noexec,nosuid,size=64m
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+      - /proc:/host/proc:ro
+      - maintenant-data:/data
+    environment:
+      MAINTENANT_ADDR: "0.0.0.0:8080"
+      MAINTENANT_DB: /data/maintenant.db
+      MAINTENANT_BASE_URL: https://maintenant.opytex.org
+    networks:
+      - traefik-proxy
+    labels:
+      - traefik.enable=true
+      - traefik.docker.network=traefik-proxy
+      - traefik.http.routers.maintenant_secure.entrypoints=web-secure
+      - traefik.http.routers.maintenant_secure.rule=Host(`maintenant.opytex.org`)
+      - traefik.http.routers.maintenant_secure.tls.certresolver=letsencrypt
+      - traefik.http.routers.maintenant_secure.middlewares=authentik@file
+      - traefik.http.services.maintenant.loadbalancer.server.port=8080
+
+volumes:
+  maintenant-data:
+
+networks:
+  traefik-proxy:
+    external: true