feat: add telos static site service with Traefik routing

ai/compose.yml

@@ -29,10 +29,10 @@ services:
     build:
       context: ./hermes
       args:
-        HERMES_PLUGIN_URLS: "git+https://code.lazyworkhorse.net/Hermes/hermes-infra-plugin.git;git+https://code.lazyworkhorse.net/Hermes/hermes-connecteam-plugin.git;git+https://code.lazyworkhorse.net/Hermes/hermes-email-plugin.git;git+https://code.lazyworkhorse.net/Hermes/hermes-fabric-plugin.git;git+https://code.lazyworkhorse.net/Hermes/hermes-file-processor-plugin.git;git+https://code.lazyworkhorse.net/Hermes/hermes-latex-plugin.git;git+https://code.lazyworkhorse.net/gortium/hermes-identity-plugin.git;git+https://code.lazyworkhorse.net/Hermes/hermes-ollama-plugin.git;git+https://code.lazyworkhorse.net/Hermes/hermes-org-plugin.git;git+https://code.lazyworkhorse.net/gortium/hermes-piper-plugin.git;git+https://code.lazyworkhorse.net/Hermes/hermes-qet-plugin.git;git+https://code.lazyworkhorse.net/Hermes/hermes-shorts-plugin.git;git+https://code.lazyworkhorse.net/Hermes/hermes-vcs-plugin.git;git+https://code.lazyworkhorse.net/Hermes/hermes-plugin-media-extensions.git"
+        HERMES_PLUGIN_URLS: "git+https://code.lazyworkhorse.net/gortium/hermes-piper-plugin.git;git+https://code.lazyworkhorse.net/gortium/hermes-identity-plugin.git"
     container_name: hermes
     entrypoint: ["/bin/bash", "-c",
-      "bash /usr/local/bin/run-multi-gateways.sh && exec /usr/bin/tini -g -- /opt/hermes/docker/entrypoint.sh \"$@\"",
+      "bash /opt/data/hermes-tools/install.sh && bash /usr/local/bin/run-multi-gateways.sh && exec /usr/bin/tini -g -- /opt/hermes/docker/entrypoint.sh \"$@\"",
       "hermes-entrypoint"]
     restart: always
     # Gateway run enables the internal API server on port 8642

homepage/compose.yml

@@ -36,6 +36,32 @@ services:
       # Internal port
       - "traefik.http.services.homer.loadbalancer.server.port=8080"
 
+  telos:
+    image: nginx:alpine
+    container_name: telos
+    volumes:
+      - /mnt/HoardingCow_docker_data/Telos/site:/usr/share/nginx/html:ro
+    restart: always
+    networks:
+      - homepage_net
+    labels:
+      - "traefik.enable=true"
+
+      # HTTP → HTTPS redirect
+      - "traefik.http.routers.telos-http.rule=Host(`telos.lazyworkhorse.net`)"
+      - "traefik.http.routers.telos-http.entrypoints=web"
+      - "traefik.http.routers.telos-http.middlewares=redirect-to-https"
+      - "traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https"
+
+      # HTTPS router
+      - "traefik.http.routers.telos-https.rule=Host(`telos.lazyworkhorse.net`)"
+      - "traefik.http.routers.telos-https.entrypoints=websecure"
+      - "traefik.http.routers.telos-https.tls=true"
+      - "traefik.http.routers.telos-https.tls.certresolver=njalla"
+
+      # Internal port
+      - "traefik.http.services.telos.loadbalancer.server.port=80"
+
 networks:
   homepage_net:
     external: true