From a1a41ba696d6ba4bdda2e3acf053ef0ff137697c Mon Sep 17 00:00:00 2001
From: Bendt <timothy.bendt@corteva.com>
Date: Mon, 9 Feb 2026 09:52:31 -0500
Subject: [PATCH] fix memos perms

---
 memos-compose.yml | 36 ++++++++++++++++++++++++++++++++++++
 1 file changed, 36 insertions(+)

diff --git a/memos-compose.yml b/memos-compose.yml
index e660076..6f5da03 100644
--- a/memos-compose.yml
+++ b/memos-compose.yml
@@ -1,9 +1,26 @@
 version: "3.8"
 
 services:
+  memos-init:
+    image: neosmemo/memos:stable
+    user: "0"
+    entrypoint: ["sh", "-c", "chown -R 65532:65532 /var/opt/memos && echo 'Permissions fixed'"]
+    volumes:
+      - memos_data:/var/opt/memos
+    restart: "no"
+    deploy:
+      restart_policy:
+        condition: none
+        delay: 0s
+        max_attempts: 1
+        window: 0s
+
   memos:
     image: neosmemo/memos:stable
     restart: unless-stopped
+    depends_on:
+      memos-init:
+        condition: service_completed_successfully
     volumes:
       - memos_data:/var/opt/memos
     environment:
@@ -11,5 +28,24 @@ services:
       - MEMOS_PORT=${MEMOS_PORT}
     ports:
       - "5230"
+    networks:
+      - dokploy-network
+    labels:
+      - traefik.http.routers.memos-web.rule=Host(`memos.bendtstudio.com`)
+      - traefik.http.routers.memos-web.entrypoints=web
+      - traefik.http.services.memos-web.loadbalancer.server.port=5230
+      - traefik.http.routers.memos-web.service=memos-web
+      - traefik.http.routers.memos-web.middlewares=redirect-to-https@file
+      - traefik.http.routers.memos-websecure.rule=Host(`memos.bendtstudio.com`)
+      - traefik.http.routers.memos-websecure.entrypoints=websecure
+      - traefik.http.services.memos-websecure.loadbalancer.server.port=5230
+      - traefik.http.routers.memos-websecure.service=memos-websecure
+      - traefik.http.routers.memos-websecure-websecure.tls.certresolver=letsencrypt
+      - traefik.enable=true
+
 volumes:
   memos_data:
+
+networks:
+  dokploy-network:
+    external: true