fix(kener): define REDIS_URL and drop unused databases

Kener v4 requires Redis for its BullMQ queues, caching and scheduler,
so the app crashed on startup with "REDIS_URL is not defined in
environment variables" right after printing that it was running
(issue #976). The template also spun up both a postgres and a mariadb
container while DATABASE_URL pointed at SQLite, so neither database
was ever used (issue #282).

Changes, aligned with the upstream docker-compose.yml
(rajnandan1/kener):

- Add a redis:7-alpine service with a healthcheck and persistent
  volume, wire REDIS_URL=redis://redis:6379 and make kener depend on
  redis being healthy
- Remove the unused postgres and mysql services plus their env vars
  and generated passwords; keep SQLite (upstream default) persisted
  in the kener_db volume
- Set ORIGIN to https://<domain> instead of http://localhost:3000 so
  CSRF protection works behind the generated domain
- Drop the stale /app/uploads bind mount (kener v4 only persists
  /app/database) and the obsolete compose version key

Deploy-tested on a Dokploy instance: migrations and seed complete,
schedulers start, "Kener version 4.1.2 is running!", HTTP 200 on the
generated domain, both containers stable.

Closes #976
Closes #282

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

blueprints/kener/docker-compose.yml

@@ -1,39 +1,35 @@
-version: "3.8"
-
 services:
   kener:
     image: rajnandan1/kener:latest
     environment:
       - TZ=${TZ}
       - KENER_SECRET_KEY=${KENER_SECRET_KEY} # 🔐 API key / secret
+      - ORIGIN=${ORIGIN}
+      - REDIS_URL=${REDIS_URL}
       - DATABASE_URL=${DATABASE_URL}
       - KENER_BASE_PATH=${KENER_BASE_PATH}
-      - ORIGIN=${ORIGIN}
       - RESEND_API_KEY=${RESEND_API_KEY} # 🔐 API key
       - RESEND_SENDER_EMAIL=${RESEND_SENDER_EMAIL}
     ports:
       - 3000
     volumes:
       - kener_db:/app/database
-      - ../files/uploads:/app/uploads
+    depends_on:
+      redis:
+        condition: service_healthy
     restart: unless-stopped
 
-  postgres:
-    image: postgres:alpine
-    environment:
-      - POSTGRES_USER=${POSTGRES_USER}
-      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD} # 🔐 DB password
-      - POSTGRES_DB=${POSTGRES_DB}
-    restart: unless-stopped
-
-  mysql:
-    image: mariadb:11
-    environment:
-      - MYSQL_USER=${MYSQL_USER}
-      - MYSQL_PASSWORD=${MYSQL_PASSWORD} # 🔐 DB password
-      - MYSQL_DATABASE=${MYSQL_DATABASE}
-      - MYSQL_RANDOM_ROOT_PASSWORD=true
+  redis:
+    image: redis:7-alpine
+    volumes:
+      - kener_redis:/data
+    healthcheck:
+      test: ["CMD", "redis-cli", "ping"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
     restart: unless-stopped
 
 volumes:
   kener_db: {}
+  kener_redis: {}

blueprints/kener/template.toml

@@ -1,8 +1,6 @@
 [variables]
 main_domain = "${domain}"
 KENER_SECRET_KEY = "${password:64}"
-POSTGRES_PASSWORD = "${password:32}"
-MYSQL_PASSWORD = "${password:32}"
 
 [config]
 [[config.domains]]
@@ -13,25 +11,9 @@ host = "${main_domain}"
 [config.env]
 TZ = "Etc/UTC"
 KENER_SECRET_KEY = "${KENER_SECRET_KEY}" # 🔐 API key / secret
+ORIGIN = "https://${main_domain}"
+REDIS_URL = "redis://redis:6379"
 DATABASE_URL = "sqlite://./database/kener.sqlite.db"
 KENER_BASE_PATH = ""
-ORIGIN = "http://localhost:3000"
 RESEND_API_KEY = ""
 RESEND_SENDER_EMAIL = "Accounts <accounts@resend.dev>"
-POSTGRES_USER = "user"
-POSTGRES_DB = "kener_db"
-MYSQL_USER = "user"
-MYSQL_DATABASE = "kener_db"
-MYSQL_RANDOM_ROOT_PASSWORD = "true"
-MYSQL_PASSWORD = "${MYSQL_PASSWORD}" # 🔐 DB password
-POSTGRES_PASSWORD = "${POSTGRES_PASSWORD}" # 🔐 DB password
-
-[[config.mounts]]
-type = "volume"
-source = "kener_db"
-target = "/app/database"
-
-[[config.mounts]]
-type = "bind"
-source = "../files/uploads"
-target = "/app/uploads"

blueprints/zitadel/docker-compose.yml

@@ -1,7 +1,9 @@
+version: '3.8'
+
 services:
   zitadel:
     restart: 'always'
-    image: 'ghcr.io/zitadel/zitadel:v4.16.0'
+    image: 'ghcr.io/zitadel/zitadel:latest'
     command: 'start-from-init --masterkey "${ZITADEL_MASTERKEY}" --tlsMode disabled'
     environment:
       # Database Configuration
@@ -15,37 +17,33 @@ services:
       ZITADEL_DATABASE_POSTGRES_ADMIN_PASSWORD: "${POSTGRES_PASSWORD}"
       ZITADEL_DATABASE_POSTGRES_ADMIN_SSL_MODE: disable
 
-      # External access configuration. These MUST match the domain configured
-      # in the Domains tab and the scheme/port it is served on, otherwise
-      # Zitadel answers {"code":5,"message":"Not Found"}.
-      # HTTP  -> ZITADEL_EXTERNALPORT=80,  ZITADEL_EXTERNALSECURE=false
-      # HTTPS -> ZITADEL_EXTERNALPORT=443, ZITADEL_EXTERNALSECURE=true
-      ZITADEL_EXTERNALDOMAIN: "${ZITADEL_EXTERNALDOMAIN}"
-      ZITADEL_EXTERNALPORT: "${ZITADEL_EXTERNALPORT}"
-      ZITADEL_EXTERNALSECURE: "${ZITADEL_EXTERNALSECURE}"
+      # External Configuration for HTTP only - TLS mode disabled
+      ZITADEL_EXTERNALSECURE: false
+      ZITADEL_EXTERNALPORT: 8080
+      ZITADEL_EXTERNALDOMAIN: "${EXTERNAL_DOMAIN}"
       ZITADEL_TLS_ENABLED: false
 
+      # Disable Email Notifications
+      ZITADEL_NOTIFICATIONS_SMTP_HOST: ""
+      ZITADEL_NOTIFICATIONS_SMTP_PORT: ""
+
       # Custom Admin User Configuration
       ZITADEL_FIRSTINSTANCE_ORG_HUMAN_USERNAME: "${ZITADEL_FIRSTINSTANCE_ORG_HUMAN_USERNAME}"
       ZITADEL_FIRSTINSTANCE_ORG_HUMAN_PASSWORD: "${ZITADEL_FIRSTINSTANCE_ORG_HUMAN_PASSWORD}"
       ZITADEL_FIRSTINSTANCE_ORG_HUMAN_EMAIL_ADDRESS: "${ZITADEL_FIRSTINSTANCE_ORG_HUMAN_EMAIL_ADDRESS}"
       ZITADEL_FIRSTINSTANCE_ORG_HUMAN_FIRSTNAME: "${ZITADEL_FIRSTINSTANCE_ORG_HUMAN_FIRSTNAME}"
       ZITADEL_FIRSTINSTANCE_ORG_HUMAN_LASTNAME: "${ZITADEL_FIRSTINSTANCE_ORG_HUMAN_LASTNAME}"
-
-      # Use the login UI built into the API container (no extra login-v2 service needed)
+      
+      # Default Instance Features
       ZITADEL_DEFAULTINSTANCE_FEATURES_LOGINV2_REQUIRED: false
 
-    healthcheck:
-      test: ["CMD", "/app/zitadel", "ready"]
-      interval: '10s'
-      timeout: '30s'
-      retries: 12
-      start_period: '30s'
     depends_on:
       db:
         condition: 'service_healthy'
-    expose:
-      - 8080
+    ports:
+      - '8080'
+    volumes:
+      - zitadel_data:/app/data
 
   db:
     restart: 'always'
@@ -65,3 +63,4 @@ services:
 
 volumes:
   postgres_data:
+  zitadel_data:

blueprints/zitadel/meta.json

@@ -1,7 +1,7 @@
 {
   "id": "zitadel",
   "name": "Zitadel",
-  "version": "4.16.0",
+  "version": "latest",
   "description": "Open-source identity and access management platform with multi-tenancy, OpenID Connect, SAML, and OAuth 2.0 support.",
   "logo": "zitadel.png",
   "links": {

blueprints/zitadel/template.toml

@@ -7,8 +7,6 @@ admin_email = "${email}"
 admin_password = "AdminPassword123!"
 
 [config]
-mounts = []
-
 [[config.domains]]
 serviceName = "zitadel"
 port = 8080
@@ -18,15 +16,7 @@ path = "/"
 [config.env]
 POSTGRES_PASSWORD = "${postgres_password}"
 ZITADEL_MASTERKEY = "${zitadel_masterkey}"
-
-# ZITADEL_EXTERNALDOMAIN must always match the domain configured in the
-# Domains tab. If you change the domain, update this variable too (and do it
-# BEFORE the first deploy — Zitadel binds its instance to this domain on
-# first start). For a domain served over HTTPS set ZITADEL_EXTERNALPORT=443
-# and ZITADEL_EXTERNALSECURE=true.
-ZITADEL_EXTERNALDOMAIN = "${main_domain}"
-ZITADEL_EXTERNALPORT = "80"
-ZITADEL_EXTERNALSECURE = "false"
+EXTERNAL_DOMAIN = "${main_domain}"
 
 # Custom Admin User Configuration
 ZITADEL_FIRSTINSTANCE_ORG_HUMAN_USERNAME = "${admin_username}"
@@ -34,3 +24,5 @@ ZITADEL_FIRSTINSTANCE_ORG_HUMAN_PASSWORD = "${admin_password}"
 ZITADEL_FIRSTINSTANCE_ORG_HUMAN_EMAIL_ADDRESS = "${admin_email}"
 ZITADEL_FIRSTINSTANCE_ORG_HUMAN_FIRSTNAME = "Admin"
 ZITADEL_FIRSTINSTANCE_ORG_HUMAN_LASTNAME = "User"
+
+[[config.mounts]]