From c9e326b13c939dbaa140f4f1c4fcb83522ebe521 Mon Sep 17 00:00:00 2001
From: p4u1 <p4u1_f4u1@riseup.net>
Date: Tue, 23 Dec 2025 13:12:44 +0000
Subject: [PATCH] chore(deps): update traefik docker tag to v3.6.5 (#68)

This handles the [breaking change](https://doc.traefik.io/traefik/v3.6/migrate/v3/#v364) by allowing all encoded characters in the request path

Co-authored-by: Renovate Bot <renovate@coopcloud.tech>
Reviewed-on: https://git.coopcloud.tech/coop-cloud/traefik/pulls/68
Co-authored-by: p4u1 <p4u1_f4u1@riseup.net>
Co-committed-by: p4u1 <p4u1_f4u1@riseup.net>
---
 abra.sh          | 2 +-
 compose.yml      | 4 ++--
 traefik.yml.tmpl | 9 +++++++++
 3 files changed, 12 insertions(+), 3 deletions(-)

diff --git a/abra.sh b/abra.sh
index faf045b..2424c21 100644
--- a/abra.sh
+++ b/abra.sh
@@ -1,3 +1,3 @@
-export TRAEFIK_YML_VERSION=v26
+export TRAEFIK_YML_VERSION=v27
 export FILE_PROVIDER_YML_VERSION=v10
 export ENTRYPOINT_VERSION=v5
diff --git a/compose.yml b/compose.yml
index 5826b8a..8026f77 100644
--- a/compose.yml
+++ b/compose.yml
@@ -3,7 +3,7 @@ version: "3.8"
 
 services:
   app:
-    image: "traefik:v3.6.2"
+    image: "traefik:v3.6.5"
     # Note(decentral1se): *please do not* add any additional ports here.
     # Doing so could break new installs with port conflicts. Please use
     # the usual `compose.$app.yml` approach for any additional ports
@@ -53,7 +53,7 @@ services:
         - "backupbot.backup=${ENABLE_BACKUPS:-true}"
 
   socket-proxy:
-    image: lscr.io/linuxserver/socket-proxy:3.2.8-r0-ls61
+    image: lscr.io/linuxserver/socket-proxy:3.2.10-r0-ls65
     deploy:
       endpoint_mode: dnsrr
     environment:
diff --git a/traefik.yml.tmpl b/traefik.yml.tmpl
index b809384..cd2ad41 100644
--- a/traefik.yml.tmpl
+++ b/traefik.yml.tmpl
@@ -33,6 +33,15 @@ entrypoints:
           to: web-secure
   web-secure:
     address: ":443"
+    http:
+      encodedCharacters:
+        allowEncodedSlash: true
+        allowEncodedBackSlash: true
+        allowEncodedNullCharacter: true
+        allowEncodedSemicolon: true
+        allowEncodedPercent: true
+        allowEncodedQuestionMark: true
+        allowEncodedHash: true
   {{ if eq (env "GITEA_SSH_ENABLED") "1" }}
   gitea-ssh:
     address: ":2222"