From 1f1e13ff39cbf0a9a8f13400d42e3188f99385ae Mon Sep 17 00:00:00 2001
From: mr-forust <vzlomdsisma@gmail.com>
Date: Thu, 1 Jan 2026 00:25:17 +0100
Subject: [PATCH] WIP: fix: update checkmk configuration for correct routing

---
 checkmk/compose.yaml | 29 +++++++++++++++++------------
 1 file changed, 17 insertions(+), 12 deletions(-)

diff --git a/checkmk/compose.yaml b/checkmk/compose.yaml
index 512474f..40a89a6 100644
--- a/checkmk/compose.yaml
+++ b/checkmk/compose.yaml
@@ -4,7 +4,6 @@ services:
     container_name: "checkmk"
     environment:
       - CMK_PASSWORD=${CMK_PASSWORD:-password}
-      - TZ=${TZ:-Europe/Moscow}
       - CMK_SITE_ID=cmk
 
     volumes:
@@ -12,33 +11,39 @@ services:
     tmpfs:
       - /opt/omd/sites/cmk/tmp:uid=1000,gid=1000
     ports:
-      - 5555:5000
+      - 5000:5000
       - 6776:8000
       - 6556:6556
     restart: always
     labels:
       - "traefik.enable=true"
-      - "traefik.docker.network=traefik-proxy"
-
-      # Prod Router
-      - "traefik.http.routers.checkmk.rule=Host(`checkmk.forust.xyz`)"
-      - "traefik.http.routers.checkmk.entrypoints=websecure"
-      - "traefik.http.routers.checkmk.tls=true"
+      - "traefik.docker.network=proxy"
       - "traefik.http.services.checkmk.loadbalancer.server.port=5000"
 
+      # Prod Router
+      - "traefik.http.routers.checkmk.rule=Host(`cmk.forust.xyz`)"
+      - "traefik.http.routers.checkmk.entrypoints=websecure"
+      - "traefik.http.routers.checkmk.service=checkmk"
+      - "traefik.http.routers.checkmk.middlewares=security-headers@file"
+      - "traefik.http.routers.checkmk.tls=true"
+
       # Local Router
-      - "traefik.http.routers.checkmk-local.rule=Host(`checkmk.workstation.internal`) || Host(`checkmk.internal`)"
+      - "traefik.http.routers.checkmk-local.rule=Host(`cmk.workstation.internal`) || Host(`cmk.internal`)"
       - "traefik.http.routers.checkmk-local.entrypoints=websecure"
+      - "traefik.http.routers.checkmk-local.service=checkmk"
+      - "traefik.http.routers.checkmk-local.middlewares=security-headers@file"
       - "traefik.http.routers.checkmk-local.tls=true"
 
       # Dev Router
-      - "traefik.http.routers.checkmk-dev.rule=Host(`checkmk.gigaforust.internal`)"
+      - "traefik.http.routers.checkmk-dev.rule=Host(`cmk.gigaforust.internal`)"
+      - "traefik.http.routers.checkmk-dev.middlewares=security-headers@file"
+      - "traefik.http.routers.checkmk-dev.service=checkmk"
       - "traefik.http.routers.checkmk-dev.entrypoints=websecure"
       - "traefik.http.routers.checkmk-dev.tls=true"
 
     networks:
-      - traefik-proxy
+      - proxy
 
 networks:
-  traefik-proxy:
+  proxy:
     external: true
\ No newline at end of file