commit 7fa2d8e4ca6aedd0b71e3bed128e6a5591703e0f
Author: nkozobrod <kozobrod@gmail.com>
Date:   Sat May 30 12:07:11 2026 +0000

    Clean: remove source code, keep only compose config

diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..2ea98bf
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,38 @@
+# Secrets
+.env
+
+# Source code (only docker-compose is tracked)
+server/
+web/
+docker/
+patches/
+nix/
+.github/
+*.go
+*.mod
+*.sum
+*.sh
+*.service
+*.nix
+*.json
+*.jsx
+*.js
+*.css
+*.lock
+*.babelrc
+*.eslintrc
+*.md
+LICENSE
+flake.nix
+release.json
+upx
+Dockerfile*
+
+# Volumes
+torrserver_config/
+torrserver_log/
+torrserver_torrents/
+
+# OS
+.DS_Store
+Thumbs.db
diff --git a/docker-compose.yml b/docker-compose.yml
new file mode 100644
index 0000000..518afe0
--- /dev/null
+++ b/docker-compose.yml
@@ -0,0 +1,45 @@
+services:
+  torrserver:
+    build: .
+    restart: always
+    ports:
+      - "8090:8090"
+    environment:
+      TS_CONF_PATH: "/opt/ts/config"
+      TS_LOG_PATH: "/opt/ts/log"
+      TS_TORR_DIR: "/opt/ts/torrents"
+      TS_PORT: "8090"
+    volumes:
+      - torrserver_config:/opt/ts/config
+      - torrserver_log:/opt/ts/log
+      - torrserver_torrents:/opt/ts/torrents
+      # Путь к медиа на Synology (настрой под себя)
+      - /mnt/synology_drive/media:/media:ro
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.torrserver.rule=Host(`${TORR_SUBDOMAIN}.${DOMAIN_NAME}`)
+      - traefik.http.routers.torrserver.tls=true
+      - traefik.http.routers.torrserver.entrypoints=web,websecure
+      - traefik.http.routers.torrserver.tls.certresolver=myresolver
+      # Security headers (аналогично n8n)
+      - traefik.http.middlewares.torrserver-headers.headers.SSLRedirect=true
+      - traefik.http.middlewares.torrserver-headers.headers.STSSeconds=315360000
+      - traefik.http.middlewares.torrserver-headers.headers.browserXSSFilter=true
+      - traefik.http.middlewares.torrserver-headers.headers.contentTypeNosniff=true
+      - traefik.http.middlewares.torrserver-headers.headers.forceSTSHeader=true
+      - traefik.http.middlewares.torrserver-headers.headers.SSLHost=${DOMAIN_NAME}
+      - traefik.http.middlewares.torrserver-headers.headers.STSIncludeSubdomains=true
+      - traefik.http.middlewares.torrserver-headers.headers.STSPreload=true
+      - traefik.http.routers.torrserver.middlewares=torrserver-headers@docker
+    networks:
+      - proxy
+
+volumes:
+  torrserver_config:
+  torrserver_log:
+  torrserver_torrents:
+
+networks:
+  proxy:
+    external: true
+    name: traefik_proxy