From 20c35910d6bdac8ac619cba91425018b2964b75a Mon Sep 17 00:00:00 2001
From: Florent Guiotte <florent.guiotte@irisa.fr>
Date: Thu, 6 Nov 2025 23:06:06 +0100
Subject: [PATCH] Add vikunja

---
 .env                                          | Bin 94 -> 320 bytes
 bind9/guiotte.db                              |   1 +
 ddclient/ddclient.conf                        | Bin 1053 -> 1126 bytes
 docker-compose.yml                            |  28 +++++++-
 swag/nginx/proxy-confs/vikunja.subdomain.conf |  63 ++++++++++++++++++
 5 files changed, 91 insertions(+), 1 deletion(-)
 create mode 100644 swag/nginx/proxy-confs/vikunja.subdomain.conf

diff --git a/.env b/.env
index 29ce60d29d4a39606cfa704f3f5bae734b5480c2..5eb6a307ffc5233fd451a80e2bd108204249b7a6 100644
GIT binary patch
literal 320
zcmV-G0l)qLM@dveQdv+`0O1J!FSVv(v0PX71zY;x8<UPB^p@4zrM|d|@4PVC@n`ig
z5(^PzQifciZyp@ZIJ07xM=E>cRqzf4tCl;IdUb+>8kcY*lwv02JU&2=9sgbm!aCDI
z1)wvP;`0g#ohI6f0ja31Wm4bqIc-IssFD$-w(!;`woW~01P<K*IwlxESymhMxX4)7
zA9KYk-{MY)bVGn_E`oai?eE}m28b7&i{n*prbNdy4c2beFC(mk#yyd8`bP=k5Gr0O
zwwM4zt|~^2p{}C42)3uYLIqC%AcmwjQQ0F}EAkyG%L+s77YWNoGjm(+tJlXqAYoSC
zH&S$vBTdl%AS|t{G<wx*l!jILDQvxlE?bPmF8donz<|-BNQuUrsh%Zf`x%NP#3M|f
S*}~Fnq9}Aw);$Eh#13EfQj>lF

literal 94
zcmV-k0HOZ?M@dveQdv+`0I8jUetBxtZ0Lh+5{&+Vif0P^lh!CRmVS>2g@&Hc>3r4)
zFmdLKQM_&HG-eSzedEnc!y9_d#QS=QPc5Ra2<j@Sc`cQFStf{<;+Y{~2LK-kFcn5B
A^Z)<=

diff --git a/bind9/guiotte.db b/bind9/guiotte.db
index 7a0c53c..6d596e9 100644
--- a/bind9/guiotte.db
+++ b/bind9/guiotte.db
@@ -29,3 +29,4 @@ git.guiotte.fr.    IN  CNAME   dm.guiotte.fr.
 db.guiotte.fr.     IN  CNAME   dm.guiotte.fr.
 flix.guiotte.fr.   IN  CNAME   dm.guiotte.fr.
 task.guiotte.fr.   IN  CNAME   dm.guiotte.fr.
+todo.guiotte.fr.   IN  CNAME   dm.guiotte.fr.
diff --git a/ddclient/ddclient.conf b/ddclient/ddclient.conf
index 3f931149ee2a7ab3ce89c385a91430ee7d8a25d8..a8b4d38926e80a921c38a9d54dc3422d408e2620 100644
GIT binary patch
literal 1126
zcmV-s1eyB)M@dveQdv+`09s4ijA6fN2#d}590XW$>ftWmk*Z1XvN|&2mv<`gSe!j|
z|6&|0i0Z<P`0?x)r`v>0CLtm?K@}SMb5}lkui*$!vkd0nEdfYBsH?hC6uZkA?SdsP
zL1a_3vk=qUXVJtol+LX0$aEIUJWQK3|Fggelr1{S9k{v~k+74nDvrCHJb=f~&ZV%z
z!n)taM!jF`@1-<5SGMSX4O9AXdksm5<YBq3pmA1Nq4DNyAWCa*Fj4^lIn<VAN*Nr5
zwpF=hq?Nj10u6s{p*0BNt;qjlAlc?|oodke*V1veAQoqBsg~8~Jqm|WT+^Mqfdv8O
zV;`Rj4Vvx66!3@I3PC^3g}vX6j4>vgqR47(G9=j1yLJttaED^uoJ^lJ8g<Yl5_103
zrs#^5n{%vVX@D7=pj5{QYJpN+h&~6JE+ws<qIpC5S`9G4q4X&s75}Gc4-WS#$0a&h
z#4~*k(9?kFU0x>`)8cT$W+#<$m|OgUhdr_j)OvaTQFnFYG_eUOYho04(3ZW0Pn_A~
z2;K<@^laEK=oD@Frt1n+ye!suxrj0sinA)EuTyA@8O)~Uf+QLH|E^Q5&EHA~7Kcs@
z1)B8=&3<9u4x7!e5wXw@4h^c6Ah@pRVXyT_5APT2<Ld21c(nZKi;t+;a(7o2gYf?*
zSi`5ezSELUUIT^saAJb}Vj>}NKnO)w;hN^9Y}k42p|T+V!4-i5#o_v42$xW1U(E0V
zH#?@HZh~IVMJIn|snbInbBT`#!J_R}E*>HNNFeXKt(b3_tbzVJ3(c`QlSC4tABbz=
zAEIvOrBrehD~!8r(s}l=kI1?6o}uJ}#4wQNDv<M=ZpJw&qWqak+g(FHYB4hDqxc9@
zdj4z2L?>svLaD|%TexX4)l2A}bA@))&N1xut${V+4n&|lvS9SbG9p}yIr=6;1iZ7b
z0m<hxp@Dv0ctFez*tHg8)O0?hbMzJK0U!?u?o9F+$0I3^hw5<e2y_BOlZ@)y3duCv
z9Z-n8-6BXpG2RMu1#V%%8WSynFMPy(y#M@=1id5+cm2HECs5Sk`3k#D?HqARu2Vp=
z8gU1ye=|R$crlC~8Zi*OBUdJ2kR*#)3wvV#x;!!yh~{Xsd|v$-v22p@{hSHlfd_#s
zd>3Sll1P%WnlT_l3;W7q;C3Z9!|(#}5zjZ+Ebu24sCtanim5z;3uIEmvE_Z%ruH%6
zh>U&k`{+*_yo5F$6G2uR4%a-?YQXwwRwf6vtl9WNhHJ}2SGD+h%W*N}K8U}G#UH4q
z|4bJjsVFMt$w}fv*;);>c8^bE6lZ?W(FBs01}cU}F4iaLV8%i>FE#7lTv4<?bDd>g
z3bo+TRl;}2A2E*GdAtq>a7l|!4^f0M|1JuUyc>}=UXAQ4cXD{0*;Cx|3S~qUsvRd$
s#Se4|G#8&bW#kFw->sS;EVFBcKQcYi2?`lXucqJ^bGcEhNWy9ctEfOD761SM

literal 1053
zcmV+&1mgPuM@dveQdv+`0H=h|1~=NbU_b32ACCUhip;x}`iFXCiN`iKh!APjtD!c-
z`6hrpP%$MGG05)4<+mrBdJXE*)}=_(Q0B#&wnV-8iBA@dS8N+L&?7Nfgwn`lgBewh
zpfA*8_5`lzu0x^v?>QjPH-{n}9;W=gi5|=DBs=PIj5Tn!Ls5Og!u)*)1NOaq;VX1c
z7TZ@Vw0~b0oF#c7R^ZL8XM1?Uad9$1QZJXf0<yf>2tZD7Rc$cckzVN$(<5GF>71;h
zEblCCe6Gk@h9Ys>v8G`~mGPb*plIJAXVL^N9425El<-bz`_y-k2ZneX4^qwgg;#;!
z8rsv`u5lU5!-c2qi9|@b$54XMDMxW8JD~xJK6wtzH}m{wW>bQ7W!HY^w;MB`=7O$E
zekQJ{2|BMNOq_bZTU|UM%Xt)ksq{-C0oL|CE$HNcH5WH^Nnh7FN?m{ZHu8PM$dbYO
zCbicv>ZyS%ROqn$o|CBX(RBPJS2}+Uy=%yL$(huZXAAEa=bPX<u-!0$@L8#ooLdel
zC-0z?59=~<*~D%?*)boWPo_A#OjgXCH^;-~JaD|oIH+~Y(H~>`bEF%Z=-`-=-F>1~
z4OwqN`p*PG!sjvlUf~(V8Nc@G53#uF*RIq|E_eSv@UkuI8gt{ZQ+d}Roqx4M<(5<|
z0nCkT4@4?e^!HJWSaqikN`T0S@ho-GJ-A}vy>o%fe6mDd(be*Lu29guMbf9*z9cR>
z78VIM+=e6>8#a^tU-kG$*;<&sbHcq;?3NY1x1<TauJit|cAFtxbsbcoIRWamY?*E4
z)}`@=naDo(;QG$||8Nc%Q-d6y>eOKB@xZw8pVNxXW#QY0F5`X=*9mB{wb~^?<`#s~
z6kDy}KE5Q4F<#{@@VqOK4yWxpkPg~|_2a<l<%E=rcNKH!Jt^BL@lf#ZMVYQ7pt8r9
zape`>=B*CljNRjKu4)#Mc=-Ad$Pnc?Pxye_E}Dn=wmiJ+iH*{)c@A&xyFN_rH9v?y
zcPeO@Q7*SI${kF+#Oh)9=YmA;$Iz)>Tk2*7>b@@R6wcPyd*Pwpi1?|qRkM<%aWVFk
zs^9P?ExP?^L&ztpY1G!^V%q~JQO1LeCPUgo6vhH&1XS!=x0=9S=F4lIB~46r_<%wH
zD}@?TP0VFxKGNnH;xDyrM@=ppn`+?}{Wp8Ci9Wq=wyoWerYfyL&E4bWwJs=2j9S^1
zI;y{MP8fFKfUj!)*(4z7Kx$@0wug5uC)8_-pnp{VpW%L|LJ{ZaBHYe8;y<eev}E23
zSe>{ttv^Ql`GIi<PEZ~ibgv~<H+^odO!#)Ohv?<Cc_=3{|Ev{0h%vm~7QEJ2%|?st
Xz?f$7A*R7;E8233LTd(3=H(O<?tUWa

diff --git a/docker-compose.yml b/docker-compose.yml
index d5369bc..eec5c71 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,7 +1,7 @@
 x-common-environment: &common-environment
   PUID: 1000
   PGID: 1000
-  TZ: Europe/Paris
+  TZ: &tz Europe/Paris
 
 
 services:
@@ -422,6 +422,30 @@ services:
       - taskchampion-data:/taskchampion-data
 
 
+  vikunja:
+    image: vikunja/vikunja
+    container_name: vikunja
+    restart: unless-stopped
+    environment:
+      <<: *common-environment
+      VIKUNJA_SERVICE_PUBLICURL: https://todo.guiotte.fr
+      VIKUNJA_DATABASE_PATH: /db/vikunja.db
+      VIKUNJA_SERVICE_JWTSECRET: ${VIKUNJA_SERVICE_JWTSECRET}
+      VIKUNJA_SERVICE_TIMEZONE: *tz
+      VIKUNJA_MAILER_ENABLED: true
+      VIKUNJA_MAILER_HOST: ${MAIL_SERVER}
+      VIKUNJA_MAILER_PORT: ${MAIL_SMTP_PORT}
+      VIKUNJA_MAILER_USERNAME: ${MAIL_USERNAME}
+      VIKUNJA_MAILER_PASSWORD: ${MAIL_PASSWORD}
+      VIKUNJA_MAILER_FORCESSL: ${MAIL_USE_SSL}
+      VIKUNJA_SERVICE_ENABLEREGISTRATION: true
+
+
+    volumes:
+      - vikunja-data:/app/vikunja/files
+      - vikunja-db:/db
+
+
 volumes:
   money-data:
   lychee-db:
@@ -449,6 +473,8 @@ volumes:
   nocodb-db:
   jellyfin-config:
   taskchampion-data:
+  vikunja-data:
+  vikunja-db:
 
 
 secrets:
diff --git a/swag/nginx/proxy-confs/vikunja.subdomain.conf b/swag/nginx/proxy-confs/vikunja.subdomain.conf
new file mode 100644
index 0000000..aada9d7
--- /dev/null
+++ b/swag/nginx/proxy-confs/vikunja.subdomain.conf
@@ -0,0 +1,63 @@
+## Version 2024/07/16
+# REMOVE THIS LINE BEFORE SUBMITTING: The structure of the file (all of the existing lines) should be kept as close as possible to this template.
+# REMOVE THIS LINE BEFORE SUBMITTING: Look through this file for <tags> and replace them. Review other sample files to see how things are done.
+# REMOVE THIS LINE BEFORE SUBMITTING: The comment lines at the top of the file (below this line) should explain any prerequisites for using the proxy such as DNS or app settings.
+# make sure that your <container_name> container is named <container_name>
+# make sure that your dns has a cname set for <container_name>
+
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+
+    server_name todo.*;
+
+    include /config/nginx/ssl.conf;
+
+    client_max_body_size 0;
+
+    # enable for ldap auth (requires ldap-location.conf in the location block)
+    #include /config/nginx/ldap-server.conf;
+
+    # enable for Authelia (requires authelia-location.conf in the location block)
+    #include /config/nginx/authelia-server.conf;
+
+    # enable for Authentik (requires authentik-location.conf in the location block)
+    #include /config/nginx/authentik-server.conf;
+
+    location / {
+        # enable the next two lines for http auth
+        #auth_basic "Restricted";
+        #auth_basic_user_file /config/nginx/.htpasswd;
+
+        # enable for ldap auth (requires ldap-server.conf in the server block)
+        #include /config/nginx/ldap-location.conf;
+
+        # enable for Authelia (requires authelia-server.conf in the server block)
+        #include /config/nginx/authelia-location.conf;
+
+        # enable for Authentik (requires authentik-server.conf in the server block)
+        #include /config/nginx/authentik-location.conf;
+
+        include /config/nginx/proxy.conf;
+        include /config/nginx/resolver.conf;
+        set $upstream_app vikunja;
+        set $upstream_port 3456;
+        set $upstream_proto http;
+        proxy_pass $upstream_proto://$upstream_app:$upstream_port;
+
+        # REMOVE THIS LINE BEFORE SUBMITTING: Additional proxy settings such as headers go below this line, leave the blank line above.
+    }
+
+    # REMOVE THIS LINE BEFORE SUBMITTING: Some proxies require one or more additional location blocks for things like API or RPC endpoints.
+    # REMOVE THIS LINE BEFORE SUBMITTING: If the proxy you are making a sample for does not require an additional location block please remove the commented out section below.
+    # location ~ (/<container_name>)?/api {
+    #     include /config/nginx/proxy.conf;
+    #     include /config/nginx/resolver.conf;
+    #     set $upstream_app <container_name>;
+    #     set $upstream_port <port_number>;
+    #     set $upstream_proto <http or https>;
+    #     proxy_pass $upstream_proto://$upstream_app:$upstream_port;
+    #
+    #     # REMOVE THIS LINE BEFORE SUBMITTING: Additional proxy settings such as headers go below this line, leave the blank line above.
+    # }
+}