chore: add env_file: stack.env to all compose services

Portainer git-stack deployments require an explicit env_file reference
in the compose file to load variables from the repo's stack.env.
Adds env_file: [stack.env] before every service-level environment:
block across all 10 stacks.

stacks/authentik/docker-compose.yml

@@ -12,6 +12,8 @@ services:
     restart: unless-stopped
     command: server
     networks: [authentik, edge]
+    env_file:
+      - stack.env
     environment:
       AUTHENTIK_REDIS__HOST: authentik-redis
       AUTHENTIK_POSTGRESQL__HOST: authentik-db
@@ -34,6 +36,8 @@ services:
     restart: unless-stopped
     command: worker
     networks: [authentik]
+    env_file:
+      - stack.env
     environment:
       AUTHENTIK_REDIS__HOST: authentik-redis
       AUTHENTIK_POSTGRESQL__HOST: authentik-db
@@ -53,6 +57,8 @@ services:
     image: postgres:16-alpine
     restart: unless-stopped
     networks: [authentik]
+    env_file:
+      - stack.env
     environment:
       POSTGRES_USER: ${AUTHENTIK_DB_USER:-authentik}
       POSTGRES_PASSWORD: ${AUTHENTIK_DB_PASSWORD}

stacks/dev/docker-compose.yml

@@ -22,6 +22,8 @@ services:
     image: gitea/gitea:latest
     restart: unless-stopped
     networks: [dev, edge]
+    env_file:
+      - stack.env
     environment:
       - USER_UID=1000
       - USER_GID=1000
@@ -54,6 +56,8 @@ services:
     image: postgres:16-alpine
     restart: unless-stopped
     networks: [dev]
+    env_file:
+      - stack.env
     environment:
       POSTGRES_USER: gitea
       POSTGRES_PASSWORD: ${GITEA_DB_PASSWORD}
@@ -72,6 +76,8 @@ services:
     image: lscr.io/linuxserver/code-server:latest
     restart: unless-stopped
     networks: [dev, edge]
+    env_file:
+      - stack.env
     environment:
       - PUID=1000
       - PGID=1000
@@ -101,6 +107,8 @@ services:
     image: joxit/docker-registry-ui:latest
     restart: unless-stopped
     networks: [dev, edge]
+    env_file:
+      - stack.env
     environment:
       - SINGLE_REGISTRY=true
       - REGISTRY_TITLE=Valhalla Registry
@@ -125,6 +133,8 @@ services:
     image: lscr.io/linuxserver/bookstack:latest
     restart: unless-stopped
     networks: [dev, edge]
+    env_file:
+      - stack.env
     environment:
       - PUID=1000
       - PGID=1000
@@ -149,6 +159,8 @@ services:
     image: lscr.io/linuxserver/mariadb:latest
     restart: unless-stopped
     networks: [dev]
+    env_file:
+      - stack.env
     environment:
       - PUID=1000
       - PGID=1000
@@ -172,6 +184,8 @@ services:
     restart: unless-stopped
     networks: [dev, edge]
     command: node web/server.js
+    env_file:
+      - stack.env
     environment:
       - NEXT_PUBLIC_API_BASE_URL=https://plane.ginnoir.com
       - HOSTNAME=0.0.0.0
@@ -182,6 +196,8 @@ services:
     restart: unless-stopped
     networks: [dev, edge]
     command: ./bin/docker-entrypoint-api.sh
+    env_file:
+      - stack.env
     environment:
       - SECRET_KEY=${PLANE_SECRET_KEY}
       - DEBUG=0
@@ -211,6 +227,8 @@ services:
     restart: unless-stopped
     networks: [dev]
     command: ./bin/docker-entrypoint-worker.sh
+    env_file:
+      - stack.env
     environment:
       - SECRET_KEY=${PLANE_SECRET_KEY}
       - DEBUG=0
@@ -237,6 +255,8 @@ services:
     restart: unless-stopped
     networks: [dev]
     command: ./bin/docker-entrypoint-beat.sh
+    env_file:
+      - stack.env
     environment:
       - SECRET_KEY=${PLANE_SECRET_KEY}
       - DEBUG=0
@@ -257,6 +277,8 @@ services:
     restart: "no"
     networks: [dev]
     command: ./bin/docker-entrypoint-migrator.sh
+    env_file:
+      - stack.env
     environment:
       - SECRET_KEY=${PLANE_SECRET_KEY}
       - DATABASE_URL=postgresql://plane:${PLANE_DB_PASSWORD}@postgres_plane:5432/plane
@@ -281,6 +303,8 @@ services:
       /usr/bin/mc mb plane_minio/uploads --ignore-existing;
       exit 0;
       "
+    env_file:
+      - stack.env
     environment:
       - MINIO_USER=${PLANE_MINIO_USER}
       - MINIO_PASSWORD=${PLANE_MINIO_PASSWORD}
@@ -290,6 +314,8 @@ services:
     image: postgres:16-alpine
     restart: unless-stopped
     networks: [dev]
+    env_file:
+      - stack.env
     environment:
       POSTGRES_USER: plane
       POSTGRES_PASSWORD: ${PLANE_DB_PASSWORD}
@@ -322,6 +348,8 @@ services:
     restart: unless-stopped
     networks: [dev]
     command: server /data --console-address ":9001"
+    env_file:
+      - stack.env
     environment:
       MINIO_ROOT_USER: ${PLANE_MINIO_USER}
       MINIO_ROOT_PASSWORD: ${PLANE_MINIO_PASSWORD}

stacks/famapp/docker-compose.yml

@@ -14,6 +14,8 @@ services:
     pull_policy: ${FAMAPP_PULL_POLICY:-always}
     restart: unless-stopped
     networks: [famapp, edge]
+    env_file:
+      - stack.env
     environment:
       NODE_ENV: production
       AUTH_URL: ${AUTH_URL}
@@ -48,6 +50,8 @@ services:
     image: postgres:16-alpine
     restart: unless-stopped
     networks: [famapp]
+    env_file:
+      - stack.env
     environment:
       POSTGRES_USER: ${FAMAPP_DB_USER}
       POSTGRES_PASSWORD: ${FAMAPP_DB_PASSWORD}
@@ -66,6 +70,8 @@ services:
     command: server /data --console-address ":9003"
     restart: unless-stopped
     networks: [famapp]
+    env_file:
+      - stack.env
     environment:
       MINIO_ROOT_USER: ${famapp_MINIO_ROOT_USER}
       MINIO_ROOT_PASSWORD: ${famapp_MINIO_ROOT_PASSWORD}

stacks/foundry/docker-compose.yml

@@ -14,6 +14,8 @@ services:
       - /storage1/foundry:/data
       - /storage1/foundry/updatemain.bash:/home/foundry/updatemain.bash
       - /storage1/Books/Tabletop:/data/Data/storage
+    env_file:
+      - stack.env
     environment:
       - FOUNDRY_USERNAME=${FOUNDRY_USERNAME}
       - FOUNDRY_PASSWORD=${FOUNDRY_PASSWORD}
@@ -40,6 +42,8 @@ services:
       - /storage1/foundry2:/data
       - /storage1/foundry/updatemain.bash:/home/foundry/updatemain.bash
       - /storage1/Books/Tabletop:/data/Data/storage
+    env_file:
+      - stack.env
     environment:
       - FOUNDRY_USERNAME=${FOUNDRY_USERNAME}
       - FOUNDRY_PASSWORD=${FOUNDRY_PASSWORD}

stacks/media/docker-compose.yml

@@ -9,6 +9,8 @@ services:
     image: lscr.io/linuxserver/deluge:latest
     restart: unless-stopped
     networks: [media, edge]
+    env_file:
+      - stack.env
     environment:
       - PUID=${PUID}
       - PGID=${PGID}
@@ -24,6 +26,8 @@ services:
     image: lscr.io/linuxserver/nzbget:latest
     restart: unless-stopped
     networks: [media, edge]
+    env_file:
+      - stack.env
     environment:
       - PUID=${PUID}
       - PGID=${PGID}
@@ -39,6 +43,8 @@ services:
     image: lscr.io/linuxserver/sonarr:latest
     restart: unless-stopped
     networks: [media, edge]
+    env_file:
+      - stack.env
     environment:
       - PUID=${PUID}
       - PGID=${PGID}
@@ -57,6 +63,8 @@ services:
     image: lscr.io/linuxserver/radarr:latest
     restart: unless-stopped
     networks: [media, edge]
+    env_file:
+      - stack.env
     environment:
       - PUID=${PUID}
       - PGID=${PGID}
@@ -74,6 +82,8 @@ services:
     image: lscr.io/linuxserver/bazarr:latest
     restart: unless-stopped
     networks: [media, edge]
+    env_file:
+      - stack.env
     environment:
       - PUID=${PUID}
       - PGID=${PGID}
@@ -92,6 +102,8 @@ services:
     image: ghcr.io/hotio/prowlarr:latest
     restart: unless-stopped
     networks: [media, edge]
+    env_file:
+      - stack.env
     environment:
       - PUID=1000
       - PGID=1000
@@ -107,6 +119,8 @@ services:
     image: sctx/overseerr:latest
     restart: unless-stopped
     networks: [media, edge]
+    env_file:
+      - stack.env
     environment:
       - PUID=1000
       - PGID=1000
@@ -122,6 +136,8 @@ services:
     container_name: tautulli
     restart: unless-stopped
     networks: [media, edge]
+    env_file:
+      - stack.env
     environment:
       - PUID=${PUID}
       - PGID=${PGID}
@@ -137,6 +153,8 @@ services:
     container_name: qbittorrent
     restart: unless-stopped
     networks: [media, edge]
+    env_file:
+      - stack.env
     environment:
       - PUID=1000
       - PGID=1000
@@ -156,6 +174,8 @@ services:
     image: ghcr.io/hotio/whisparr:latest
     restart: unless-stopped
     networks: [media, edge]
+    env_file:
+      - stack.env
     environment:
       - PUID=1000
       - PGID=1000
@@ -178,6 +198,8 @@ services:
       options:
         max-file: "10"
         max-size: "2m"
+    env_file:
+      - stack.env
     environment:
       - PUID=1000
       - PGID=1000

stacks/monitoring/docker-compose.yml

@@ -19,6 +19,8 @@ services:
     image: ghcr.io/homarr-labs/homarr:latest
     restart: unless-stopped
     networks: [edge]
+    env_file:
+      - stack.env
     environment:
       - SECRET_ENCRYPTION_KEY=${HOMARR_SECRET_ENCRYPTION_KEY}
     ports:

stacks/notify/docker-compose.yml

@@ -13,6 +13,8 @@ services:
       - serve
     restart: unless-stopped
     networks: [edge]
+    env_file:
+      - stack.env
     environment:
       - TZ=${TZ}
       - NTFY_DEFAULT_HOST=https://ntfy.ginnoir.com
@@ -55,6 +57,8 @@ services:
       - /config/freshrss/extensions:/var/www/FreshRSS/extensions
     ports:
       - "9999:80"
+    env_file:
+      - stack.env
     environment:
       - CRON_MIN=3,33
       - TRUSTED_PROXY=172.16.0.1/12 192.168.0.1/16
@@ -66,6 +70,8 @@ services:
     image: ghcr.io/verifiedjoseph/vigilant:latest
     restart: unless-stopped
     networks: [edge]
+    env_file:
+      - stack.env
     environment:
       - VIGILANT_NOTIFICATION_SERVICE=ntfy
       - VIGILANT_NOTIFICATION_NTFY_URL=https://ntfy.ginnoir.com/

stacks/owncloud/docker-compose.yml

@@ -16,6 +16,8 @@ services:
         condition: service_healthy
       redis:
         condition: service_healthy
+    env_file:
+      - stack.env
     environment:
       - OWNCLOUD_DOMAIN=${OWNCLOUD_DOMAIN}
       - OWNCLOUD_DB_TYPE=mysql
@@ -44,6 +46,8 @@ services:
     container_name: owncloud_mariadb
     restart: unless-stopped
     networks: [owncloud]
+    env_file:
+      - stack.env
     environment:
       - MYSQL_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD}
       - MYSQL_USER=${OWNCLOUD_DB_USER}

stacks/proxy/docker-compose.yml

@@ -22,6 +22,8 @@ services:
     ports:
       - "80:80"
       - "443:443"
+    env_file:
+      - stack.env
     environment:
       - CF_API_TOKEN=${CF_API_TOKEN}
     volumes:

stacks/resume/docker-compose.yml

@@ -14,6 +14,8 @@ services:
     networks: [resume]
     volumes:
       - /config/resume/postgres:/var/lib/postgresql/data
+    env_file:
+      - stack.env
     environment:
       - POSTGRES_DB=postgres
       - POSTGRES_USER=postgres
@@ -35,6 +37,8 @@ services:
       - "9004:9001"
     volumes:
       - /storage1/labdata/resume/minio:/data
+    env_file:
+      - stack.env
     environment:
       - MINIO_ROOT_USER=${MINIO_ROOT_USER}
       - MINIO_ROOT_PASSWORD=${MINIO_ROOT_PASSWORD}
@@ -50,6 +54,8 @@ services:
     image: ghcr.io/browserless/chromium:latest
     restart: unless-stopped
     networks: [resume]
+    env_file:
+      - stack.env
     environment:
       - TIMEOUT=10000
       - CONCURRENT=10
@@ -71,6 +77,8 @@ services:
         condition: service_healthy
       chrome:
         condition: service_started
+    env_file:
+      - stack.env
     environment:
       - PORT=3000
       - NODE_ENV=production