feat: add wud service with Traefik configuration

Adds .yarnrc.yml and pins packageManager in package.json so installs
use yarn 4 with the node-modules linker instead of yarn classic.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

.yarnrc.yml

@@ -0,0 +1,8 @@
+approvedGitRepositories:
+  - "**"
+
+enableScripts: true
+
+nodeLinker: node-modules
+
+npmMinimalAgeGate: 0

docker-compose.yml

@@ -1,8 +1,6 @@
-version: "3.9"
-
 networks:
   traefik:
-    external: true
+    name: traefik
 
 volumes:
   pb_data:
@@ -42,6 +40,33 @@ services:
       - "traefik.http.routers.traefik.tls.certresolver=letsencrypt"
       - "traefik.http.routers.traefik.rule=Host(`traefik.ar.thob.studio`)"
 
+  wud:
+    image: fmartinou/whats-up-docker:latest
+    container_name: wud
+    restart: unless-stopped
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+    environment:
+      - WUD_WATCHER=all
+      - WUD_INTERVAL=5m
+      - WUD_RESTART=true
+      - WUD_LOG_LEVEL=info
+    ports:
+      - "3001:3000"
+    networks:
+      - traefik
+    labels:
+      - "traefik.enable=true"
+      - "traefik.docker.network=traefik"
+      - "traefik.http.middlewares.wud-auth.basicauth.users=wud@thob.studio:$$apr1$$gHgeyFwm$$oGcBdBE7TkdQN7oEONHxa1"
+      - "traefik.http.routers.wud.middlewares=wud-auth@docker"
+      - "traefik.http.routers.wud.rule=Host(`wud.ar.thob.studio`)"
+      - "traefik.http.routers.wud.entrypoints=websecure"
+      - "traefik.http.routers.wud.tls=true"
+      - "traefik.http.routers.wud.tls.certresolver=letsencrypt"
+      - "traefik.http.routers.wud.service=wud"
+      - "traefik.http.services.wud.loadbalancer.server.port=3000"
+
   app:
     container_name: ar-app
     image: registry.digitalocean.com/thob-blr1/ar:latest
@@ -57,17 +82,20 @@ services:
     environment:
       - VITE_POCKETBASE_URL=${VITE_POCKETBASE_URL:-https://pb.ar.thob.studio}
       - VITE_FRONTEND_URL=${VITE_FRONTEND_URL:-https://ar.thob.studio}
+      - INTERNAL_POCKETBASE_URL=http://ar-pb:8090
     depends_on:
       - pocketbase
     networks:
       - traefik
     labels:
+      - "wud.watch=true"
       - "traefik.enable=true"
       - "traefik.docker.network=traefik"
       - "traefik.http.routers.ar-app.rule=Host(`ar.thob.studio`)"
       - "traefik.http.routers.ar-app.entrypoints=websecure"
       - "traefik.http.routers.ar-app.tls=true"
       - "traefik.http.routers.ar-app.tls.certresolver=letsencrypt"
+      - "traefik.http.routers.ar-app.service=ar-app"
       - "traefik.http.services.ar-app.loadbalancer.server.port=3000"
 
   pocketbase:
@@ -85,10 +113,12 @@ services:
     networks:
       - traefik
     labels:
+      - "wud.watch=true"
       - "traefik.enable=true"
       - "traefik.docker.network=traefik"
       - "traefik.http.routers.ar-pb.rule=Host(`pb.ar.thob.studio`)"
       - "traefik.http.routers.ar-pb.entrypoints=websecure"
       - "traefik.http.routers.ar-pb.tls=true"
       - "traefik.http.routers.ar-pb.tls.certresolver=letsencrypt"
-      - "traefik.http.services.ar-pb.loadbalancer.server.port=8090"
+      - "traefik.http.routers.ar-pb.service=ar-pb"
+      - "traefik.http.services.ar-pb.loadbalancer.server.port=8090"

package.json

@@ -40,5 +40,6 @@
     "typescript": "^5.9.2",
     "vite": "^7.1.7",
     "vite-tsconfig-paths": "^5.1.4"
-  }
+  },
+  "packageManager": "yarn@4.16.0+sha512.5374c94eb4ef6aa8188fb112f20c1aa6569f248d676c5e576e1fd2a1a4d8d87a96df65d9dfe1c2a0252cbe38bda46cf18d955005b81b43cc7607a5c9d56fd2b6"
 }