From 6cb0ab55b1388cba5d080195ccb056d6ea08aa4f Mon Sep 17 00:00:00 2001
From: Nathan Castaldi <71972541+ncastaldi@users.noreply.github.com>
Date: Tue, 28 Apr 2026 19:14:19 -0400
Subject: [PATCH] initial guardian config

initial guardian config
---
 nodes/heimdall/guardian/compose.yaml | 38 ++++++++++++++++++++++++++++
 1 file changed, 38 insertions(+)
 create mode 100644 nodes/heimdall/guardian/compose.yaml

diff --git a/nodes/heimdall/guardian/compose.yaml b/nodes/heimdall/guardian/compose.yaml
new file mode 100644
index 0000000..fb19267
--- /dev/null
+++ b/nodes/heimdall/guardian/compose.yaml
@@ -0,0 +1,38 @@
+services:
+
+  backend:
+    image: hydroshieldmkii/guardian-backend:${VERSION:-latest}
+    container_name: guardian-backend
+    networks:
+      - proxy-net
+    environment:
+      NODE_ENV: production
+      DATABASE_PATH: /app/data/plex-guard.db
+    volumes:
+      - /mnt/appdata/guardian/data:/app/data
+    restart: unless-stopped
+
+  frontend:
+    image: hydroshieldmkii/guardian-frontend:${VERSION:-latest}
+    container_name: guardian-frontend
+    networks:
+      - proxy-net 
+    ports:
+      - "${PLEXGUARD_FRONTEND_PORT:-3000}:3000"
+    environment:
+      NODE_ENV: production
+    depends_on:
+      - backend
+    restart: unless-stopped
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.guardian.entrypoints=websecure"
+      - "traefik.http.routers.guardian.rule=Host(`guardian.castaldifamily.com`)"
+      - "traefik.http.routers.guardian.tls=true"
+      - "traefik.http.routers.guardian.tls.certresolver=cloudflare"
+      - "traefik.http.routers.guardian.service=guardian"
+      - "traefik.http.services.guardian.loadbalancer.server.port=3000"
+    
+networks:
+  proxy-net:
+    external: true 
\ No newline at end of file