From d05c81b4d78b9bd17036eeb6712d3127b2815cb5 Mon Sep 17 00:00:00 2001
From: f <f@sutty.nl>
Date: Wed, 24 Dec 2025 16:27:05 -0300
Subject: [PATCH 1/4] feat: anubis

---
 .env.sample        |  8 +++++++-
 compose.anubis.yml | 24 ++++++++++++++++++++++++
 2 files changed, 31 insertions(+), 1 deletion(-)
 create mode 100644 compose.anubis.yml

diff --git a/.env.sample b/.env.sample
index dd0745e..335f92f 100644
--- a/.env.sample
+++ b/.env.sample
@@ -174,4 +174,10 @@ COMPOSE_FILE="compose.yml"
 
 ## Nextcloud Talk HPB
 #COMPOSE_FILE="$COMPOSE_FILE:compose.nextcloud-talk-hpb.yml"
-#NEXTCLOUD_TALK_HPB_ENABLED=1
\ No newline at end of file
+#NEXTCLOUD_TALK_HPB_ENABLED=1
+
+## Anubis
+#COMPOSE_FILE="$COMPOSE_FILE:compose.anubis.yml"
+#ANUBIS_COOKIE_DOMAIN=example.com
+#ANUBIS_DOMAIN=anubis.example.com
+#ANUBIS_REDIRECT_DOMAINS=
diff --git a/compose.anubis.yml b/compose.anubis.yml
new file mode 100644
index 0000000..abb42ec
--- /dev/null
+++ b/compose.anubis.yml
@@ -0,0 +1,24 @@
+---
+version: "3.8"
+services:
+  app:
+    deploy:
+      labels:
+      - "traefik.http.middlewares.anubis.forwardauth.address=http://anubis:8080/.within.website/x/cmd/anubis/api/check"
+  anubis:
+    image: "ghcr.io/techarohq/anubis:v1.24.0"
+    environment:
+      BIND: ":8080"
+      TARGET: " "
+      REDIRECT_DOMAINS: "${ANUBIS_REDIRECT_DOMAINS}"
+      COOKIE_DOMAIN: "${ANUBIS_COOKIE_DOMAIN}"
+      PUBLIC_URL: "https://${ANUBIS_DOMAIN}"
+    networks:
+    - internal
+    labels:
+    - "traefik.enable=true"
+    - "traefik.http.routers.anubis_${STACK_NAME}.rule=Host(`${ANUBIS_DOMAIN}`)"
+    - "traefik.http.routers.anubis_${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}"
+    - "traefik.http.routers.anubis_${STACK_NAME}.entrypoints=websecure"
+    - "traefik.http.services.anubis_${STACK_NAME}.loadbalancer.server.port=8080"
+    - "traefik.http.routers.anubis_${STACK_NAME}.service=anubis_${STACK_NAME}"
-- 
2.49.0


From fa7cf3e17bb00a0101a75af12e63ef376ca6d112 Mon Sep 17 00:00:00 2001
From: f <f@sutty.nl>
Date: Wed, 24 Dec 2025 16:49:37 -0300
Subject: [PATCH 2/4] fix: labels

---
 compose.anubis.yml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/compose.anubis.yml b/compose.anubis.yml
index abb42ec..56190c3 100644
--- a/compose.anubis.yml
+++ b/compose.anubis.yml
@@ -19,6 +19,5 @@ services:
     - "traefik.enable=true"
     - "traefik.http.routers.anubis_${STACK_NAME}.rule=Host(`${ANUBIS_DOMAIN}`)"
     - "traefik.http.routers.anubis_${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}"
-    - "traefik.http.routers.anubis_${STACK_NAME}.entrypoints=websecure"
+    - "traefik.http.routers.anubis_${STACK_NAME}.entrypoints=web-secure"
     - "traefik.http.services.anubis_${STACK_NAME}.loadbalancer.server.port=8080"
-    - "traefik.http.routers.anubis_${STACK_NAME}.service=anubis_${STACK_NAME}"
-- 
2.49.0


From a135d170bb8013f7d6363a1a9621c6c014eed900 Mon Sep 17 00:00:00 2001
From: f <f@sutty.nl>
Date: Wed, 24 Dec 2025 16:58:51 -0300
Subject: [PATCH 3/4] fix: anubis

---
 compose.anubis.yml | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/compose.anubis.yml b/compose.anubis.yml
index 56190c3..ca2a664 100644
--- a/compose.anubis.yml
+++ b/compose.anubis.yml
@@ -17,7 +17,8 @@ services:
     - internal
     labels:
     - "traefik.enable=true"
-    - "traefik.http.routers.anubis_${STACK_NAME}.rule=Host(`${ANUBIS_DOMAIN}`)"
-    - "traefik.http.routers.anubis_${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}"
-    - "traefik.http.routers.anubis_${STACK_NAME}.entrypoints=web-secure"
-    - "traefik.http.services.anubis_${STACK_NAME}.loadbalancer.server.port=8080"
+    - "traefik.http.routers.anubis.rule=Host(`${ANUBIS_DOMAIN}`)"
+    - "traefik.http.routers.anubis.tls.certresolver=${LETS_ENCRYPT_ENV}"
+    - "traefik.http.routers.anubis.entrypoints=web-secure"
+    - "traefik.http.services.anubis.loadbalancer.server.port=8080"
+    - "traefik.http.routers.anubis.service=anubis"
-- 
2.49.0


From ac33efe73a5f50dd2feb68d35523c3f4078a0dcd Mon Sep 17 00:00:00 2001
From: f <f@sutty.nl>
Date: Wed, 24 Dec 2025 18:26:33 -0300
Subject: [PATCH 4/4] fix: labels

---
 compose.anubis.yml | 15 ++++++++-------
 1 file changed, 8 insertions(+), 7 deletions(-)

diff --git a/compose.anubis.yml b/compose.anubis.yml
index ca2a664..cae1bd2 100644
--- a/compose.anubis.yml
+++ b/compose.anubis.yml
@@ -15,10 +15,11 @@ services:
       PUBLIC_URL: "https://${ANUBIS_DOMAIN}"
     networks:
     - internal
-    labels:
-    - "traefik.enable=true"
-    - "traefik.http.routers.anubis.rule=Host(`${ANUBIS_DOMAIN}`)"
-    - "traefik.http.routers.anubis.tls.certresolver=${LETS_ENCRYPT_ENV}"
-    - "traefik.http.routers.anubis.entrypoints=web-secure"
-    - "traefik.http.services.anubis.loadbalancer.server.port=8080"
-    - "traefik.http.routers.anubis.service=anubis"
+    deploy:
+      labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.anubis.rule=Host(`${ANUBIS_DOMAIN}`)"
+      - "traefik.http.routers.anubis.tls.certresolver=${LETS_ENCRYPT_ENV}"
+      - "traefik.http.routers.anubis.entrypoints=web-secure"
+      - "traefik.http.services.anubis.loadbalancer.server.port=8080"
+      - "traefik.http.routers.anubis.service=anubis"
-- 
2.49.0