feat: add vikunja deployment configuration

.gitea/workflows/quality-assurance-template.yml

@@ -11,19 +11,19 @@ on:
         description: 'The internal project name for notifications'
         required: true
         type: string
-#    secrets:
-#      GOTIFY_URL:
-#        required: true
-#      GOTIFY_TOKEN:
-#        required: true
-#      GATEKEEPER_PASSWORD:
-#        required: true
-#      NPM_TOKEN:
-#        required: false
-#      MINTEL_PRIVATE_TOKEN:
-#        required: false
-#      GITEA_PAT:
-#        required: false
+    secrets:
+      GOTIFY_URL:
+        required: true
+      GOTIFY_TOKEN:
+        required: true
+      GATEKEEPER_PASSWORD:
+        required: true
+      NPM_TOKEN:
+        required: false
+      MINTEL_PRIVATE_TOKEN:
+        required: false
+      GITEA_PAT:
+        required: false
 
 jobs:
   prepare:
@@ -57,10 +57,12 @@ jobs:
         run: |
           rm -rf .next .turbo node_modules || true
           pnpm install --no-frozen-lockfile --reporter=append-only
-      - name: 📦 Archive dependencies (Debug)
-        run: |
-          echo "📦 node_modules size:"
-          du -sh node_modules || echo "No node_modules"
+      - name: 📦 Archive dependencies
+        uses: actions/upload-artifact@v3
+        with:
+          name: node_modules
+          path: node_modules
+          retention-days: 1
 
   static:
     name: 🔍 Static Analysis
@@ -80,7 +82,7 @@ jobs:
         with:
           node-version: 20
       - name: 📥 Restore dependencies
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v3
         with:
           name: node_modules
       - name: 🌐 HTML Validation
@@ -112,7 +114,7 @@ jobs:
         with:
           node-version: 20
       - name: 📥 Restore dependencies
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v3
         with:
           name: node_modules
       - name: 🔍 Install Chromium
@@ -150,7 +152,7 @@ jobs:
         with:
           node-version: 20
       - name: 📥 Restore dependencies
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v3
         with:
           name: node_modules
       - name: 📦 Depcheck
@@ -180,7 +182,7 @@ jobs:
         with:
           version: 10
       - name: 📥 Restore dependencies
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v3
         with:
           name: node_modules
       - name: 🔍 Install Chromium

docker-compose.mcps.yml

@@ -18,7 +18,7 @@ services:
     env_file:
       - .env
     ports:
-      - "3001:3001"
+      - "3011:3001"
     restart: unless-stopped
     networks:
       - mcp-network

packages/gitea-mcp/Dockerfile

@@ -2,7 +2,7 @@ FROM node:20-alpine AS builder
 
 WORKDIR /app
 COPY package.json pnpm-lock.yaml* ./
-RUN corepack enable pnpm && pnpm install
+RUN npm install -g pnpm@10.18.3 && pnpm install
 
 COPY tsconfig.json ./
 COPY src ./src

packages/glitchtip-mcp/Dockerfile

@@ -1,7 +1,7 @@
 FROM node:20-bookworm-slim AS builder
 WORKDIR /app
 COPY package.json ./
-RUN corepack enable pnpm && pnpm install --ignore-workspace
+RUN npm install -g pnpm@10.18.3 && pnpm install --ignore-workspace
 COPY tsconfig.json ./
 COPY src ./src
 RUN pnpm build

packages/infra/docker/vikunja-compose.yml

@@ -0,0 +1,40 @@
+services:
+  db:
+    image: postgres:15-alpine
+    environment:
+      POSTGRES_USER: vikunja
+      POSTGRES_PASSWORD: mintel_vikunja_DB_2026!
+      POSTGRES_DB: vikunja
+    volumes:
+      - ./data/db:/var/lib/postgresql/data
+    restart: always
+
+  vikunja:
+    image: vikunja/vikunja:latest
+    environment:
+      VIKUNJA_DATABASE_HOST: db
+      VIKUNJA_DATABASE_PASSWORD: mintel_vikunja_DB_2026!
+      VIKUNJA_DATABASE_TYPE: postgres
+      VIKUNJA_DATABASE_USER: vikunja
+      VIKUNJA_DATABASE_DATABASE: vikunja
+      VIKUNJA_SERVICE_PUBLICURL: https://tasks.infra.mintel.me/
+      VIKUNJA_SERVICE_ENABLEREGISTRATION: true
+      VIKUNJA_SERVICE_JWTSECRET: d2FzaHViZXJzZWN1cmVqd3RzZWNyZXQyMDI2IQ==
+    volumes:
+      - ./data/files:/app/vikunja/files
+    depends_on:
+      - db
+    restart: always
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.vikunja.rule=Host(`tasks.infra.mintel.me`)"
+      - "traefik.http.routers.vikunja.entrypoints=websecure"
+      - "traefik.http.routers.vikunja.tls.certresolver=le"
+      - "traefik.http.services.vikunja.loadbalancer.server.port=3456"
+    networks:
+      - default
+      - infra
+
+networks:
+  infra:
+    external: true

packages/infra/scripts/mintel-optimizer.sh

@@ -56,7 +56,17 @@ fi
 # 3. Global Docker Pruning
 echo "🧹 Pruning Docker resources..."
 docker system prune -af --filter "until=24h"
+
+echo "🧹 Pruning BuildKit builder containers and cache..."
+# Remove orphaned buildkit containers to release volume locks
+docker rm -f $(docker ps -aq --filter name=buildx_buildkit_builder) 2>/dev/null || true
+docker builder prune -af || true
+docker buildx prune -af || true
+
+echo "🧹 Pruning Docker volumes..."
 docker volume prune -f
+# Force remove dangling buildx state volumes that might bypass standard prune
+docker volume ls -q | grep buildx | xargs -r docker volume rm 2>/dev/null || true
 
 echo "✅ Optimization complete!"
 df -h /mnt/HC_Volume_104796416

packages/infra/scripts/prune-registry.sh

@@ -1,8 +1,14 @@
 #!/bin/bash
 set -e
 
-# Configuration
-REGISTRY_DATA="/mnt/HC_Volume_104575103/registry-data/docker/registry/v2"
+# Find registry data dynamically (volume ID might change)
+REGISTRY_DATA=$(find /mnt -maxdepth 5 -type d -path '*/registry-data/docker/registry/v2' | head -n 1)
+
+if [ -z "$REGISTRY_DATA" ]; then
+    echo "❌ Registry data directory not found!"
+    exit 1
+fi
+
 KEEP_TAGS=3
 
 echo "🏥 Starting Aggressive Registry & Docker Maintenance..."

packages/klz-payload-mcp/Dockerfile

@@ -1,7 +1,7 @@
 FROM node:20-bookworm-slim AS builder
 WORKDIR /app
 COPY package.json ./
-RUN corepack enable pnpm && pnpm install --ignore-workspace
+RUN npm install -g pnpm@10.18.3 && pnpm install --ignore-workspace
 COPY tsconfig.json ./
 COPY src ./src
 RUN pnpm build

packages/memory-mcp/Dockerfile

@@ -1,7 +1,7 @@
 FROM node:20-bookworm-slim AS builder
 WORKDIR /app
 COPY package.json ./
-RUN corepack enable pnpm && pnpm install --ignore-workspace
+RUN npm install -g pnpm@10.18.3 && pnpm install --ignore-workspace
 RUN for dir in $(find /app/node_modules -type d -name "sharp" | grep "node_modules/sharp$"); do \
     echo "module.exports = {};" > "$dir/lib/index.js" || true; \
     done

packages/serpbear-mcp/Dockerfile

@@ -1,7 +1,7 @@
 FROM node:20-bookworm-slim AS builder
 WORKDIR /app
 COPY package.json ./
-RUN corepack enable pnpm && pnpm install --ignore-workspace
+RUN npm install -g pnpm@10.18.3 && pnpm install --ignore-workspace
 COPY tsconfig.json ./
 COPY src ./src
 RUN pnpm build

packages/umami-mcp/Dockerfile

@@ -1,7 +1,7 @@
 FROM node:20-bookworm-slim AS builder
 WORKDIR /app
 COPY package.json ./
-RUN corepack enable pnpm && pnpm install --ignore-workspace
+RUN npm install -g pnpm@10.18.3 && pnpm install --ignore-workspace
 COPY tsconfig.json ./
 COPY src ./src
 RUN pnpm build