Use .env

.gitignore

@@ -13,6 +13,7 @@
 .env
 config.ini
 secrets.json
+app.ini
 
 # Exclude node_modules if it's present in any of your services
 /node_modules/

actualbudget/README.md

@@ -3,10 +3,9 @@
 Set up env
 
 ```
-ACTUAL_HTTPS_KEY_FILE_PATH=''
-ACTUAL_HTTPS_CERT_FILE_PATH=''
+ACTUAL_HTTPS_KEY=''
+ACTUAL_HTTPS_CERT=''
 ```
 
 ## Improvements
-
 - Set up https via Tailscale https://tailscale.com/kb/1153/enabling-https?ref=traefik.io

actualbudget/docker-compose.yml

@@ -3,14 +3,24 @@ services:
   actual_server:
     image: docker.io/actualbudget/actual-server:latest
     ports:
-      - "100.104.163.2:5006:5006"
+      - "5006:5006"
     environment:
-      - ACTUAL_HTTPS_KEY=/certs/key.pem
-      - ACTUAL_HTTPS_CERT=/certs/cert.pem
       - ACTUAL_UPLOAD_FILE_SYNC_SIZE_LIMIT_MB=20
       - ACTUAL_UPLOAD_SYNC_ENCRYPTED_FILE_SYNC_SIZE_LIMIT_MB=50
       - ACTUAL_UPLOAD_FILE_SIZE_LIMIT_MB=20
     volumes:
       - ${HOME}/certs:/certs
       - ${PWD}/actual-data:/data
-    restart: unless-stopped
+    restart: unless-stopped
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.actualserver.rule=Host(`$DOMAIN`)"
+      - "traefik.http.routers.gitea.entrypoints=websecure"
+      - "traefik.http.routers.gitea.tls.certresolver=myresolver"
+      - "traefik.http.services.gitea.loadbalancer.server.port=5006"
+      - "traefik.http.services.actualserver.loadbalancer.server.ip=${SERVER_IP}"
+      - "traefik.docker.network=traefik_network"
+
+networks:
+  traefik_network:
+    external: true