From ba8c7185a7f323ae2cf437b5931ae8846b0bed95 Mon Sep 17 00:00:00 2001
From: Devil <devil@devils.zone>
Date: Tue, 11 Aug 2026 15:43:06 +0200
Subject: [PATCH] fix(infrastructure): use the actual Traefik network name
 (proxy)

The external network on the target server is named "proxy", not
traefik-network as originally assumed - deploy was failing with
"network traefik-network not found". Updated the compose file and
both the infra README and vault deployment doc to match.
---
 .../05 - Development/05 - Deployment and Operations.md      | 2 +-
 infrastructure/README.md                                    | 4 ++--
 infrastructure/docker-compose.yml                           | 6 +++---
 3 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/documentation/YouTube Studio Flow/05 - Development/05 - Deployment and Operations.md b/documentation/YouTube Studio Flow/05 - Development/05 - Deployment and Operations.md
index f88b0ef..892da56 100644
--- a/documentation/YouTube Studio Flow/05 - Development/05 - Deployment and Operations.md	
+++ b/documentation/YouTube Studio Flow/05 - Development/05 - Deployment and Operations.md	
@@ -17,7 +17,7 @@ The production setup is a single-host Docker Compose deployment using **Traefik*
 | `postgres` | postgres:16-alpine | Database — bound to `127.0.0.1:5432` (not public) |
 | `redis` | redis:7-alpine | BullMQ queues — `noeviction` policy, AOF persistence |
 
-**SSL / routing**: Traefik handles TLS termination with automatic Let's Encrypt certificates. Both API (`/api` prefix) and frontend run on the same domain — Traefik routes by path prefix. The `traefik-network` external network must exist before deploy.
+**SSL / routing**: Traefik handles TLS termination with automatic Let's Encrypt certificates. Both API (`/api` prefix) and frontend run on the same domain — Traefik routes by path prefix. The `proxy` external network (the host's existing Traefik network) must exist before deploy.
 
 **Build**: Multi-stage Dockerfile (`node:22-alpine`). Builder compiles TypeScript; runner installs prod-only deps. The Prisma CLI is copied from builder stage so the `migrate` service can run schema migrations.
 
diff --git a/infrastructure/README.md b/infrastructure/README.md
index b6914f0..c0b68fd 100644
--- a/infrastructure/README.md
+++ b/infrastructure/README.md
@@ -24,8 +24,8 @@ Registry (`git.devils.zone/devil/youtube-studio-flow-{backend,frontend}`), gebau
 6. Container starten: `docker compose up -d`
 
 Für ein Update auf eine neue Version: `IMAGE_TAG` in `.env` anpassen (oder `latest`
-belassen), dann Schritte 4–6 wiederholen. Das externe Docker-Netzwerk `traefik-network`
-muss vorher existieren (`docker network create traefik-network`), falls Traefik das nicht
+belassen), dann Schritte 4–6 wiederholen. Das externe Docker-Netzwerk `proxy`
+muss vorher existieren (`docker network create proxy`), falls Traefik das nicht
 bereits selbst anlegt.
 
 ## Daten-Persistenz
diff --git a/infrastructure/docker-compose.yml b/infrastructure/docker-compose.yml
index 3039f57..ae26310 100644
--- a/infrastructure/docker-compose.yml
+++ b/infrastructure/docker-compose.yml
@@ -52,7 +52,7 @@ services:
       start_period: 30s
     networks:
       - app-network
-      - traefik-network
+      - proxy
 
   worker:
     image: git.devils.zone/devil/youtube-studio-flow-backend:${IMAGE_TAG:-latest}
@@ -99,7 +99,7 @@ services:
         condition: service_healthy
     networks:
       - app-network
-      - traefik-network
+      - proxy
 
   postgres:
     image: postgres:16-alpine
@@ -146,5 +146,5 @@ volumes:
 networks:
   app-network:
     driver: bridge
-  traefik-network:
+  proxy:
     external: true