From b09139bbe74f885049868b5715d7353799af6328 Mon Sep 17 00:00:00 2001
From: "Artemis (Iron Legion)" <jarvis@iron-legion.labs>
Date: Sat, 23 May 2026 16:46:36 -0400
Subject: [PATCH] Add Portainer CE stack for MK-7 (v2.39.2, uses :latest for
 Docker 29+ compat)

---
 new-build/portainer/docker-compose.yml | 35 ++++++++++++++++++++++++++
 1 file changed, 35 insertions(+)
 create mode 100644 new-build/portainer/docker-compose.yml

diff --git a/new-build/portainer/docker-compose.yml b/new-build/portainer/docker-compose.yml
new file mode 100644
index 0000000..e1eb285
--- /dev/null
+++ b/new-build/portainer/docker-compose.yml
@@ -0,0 +1,35 @@
+version: '3.8'
+
+services:
+  portainer:
+    image: portainer/portainer-ce:latest
+    container_name: portainer
+    restart: always
+    ports:
+      - "8000:8000"   # Edge agent port
+      - "9000:9000"   # HTTP web UI
+      - "9443:9443"   # HTTPS web UI (optional)
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+      - portainer_data:/data
+    environment:
+      - TZ=America/New_York
+    networks:
+      - portainer_net
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.portainer.rule=Host(`portainer.nb.bobbysh.me`)"
+      - "traefik.http.routers.portainer.entrypoints=websecure"
+      - "traefik.http.routers.portainer.tls=true"
+      - "traefik.http.services.portainer.loadbalancer.server.port=9000"
+      # Optional: disable Traefik if not using it yet
+      # - "traefik.enable=false"
+
+volumes:
+  portainer_data:
+    driver: local
+
+networks:
+  portainer_net:
+    driver: bridge
+    attachable: true