fix: remove sablier labels and enable direct Traefik routing

Sablier was removed from the stack — these compose files still had
traefik.enable=false + sablier group labels, causing 404s. Switched
to traefik.enable=true with explicit docker.network label.

All 3 Postiz spaces verified live with Infisical secret injection.
Old plaintext .env backups removed from server.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

deploy/docker-compose.bcrg.yml

@@ -49,12 +49,11 @@ services:
       - postiz-bcrg-uploads:/uploads/
       - /opt/infisical/entrypoint-wrapper.sh:/infisical-entrypoint.sh:ro
     labels:
-      - "traefik.enable=false"
-      - "sablier.enable=true"
-      - "sablier.group=postiz-bcrg"
+      - "traefik.enable=true"
       - "traefik.http.routers.postiz-bcrg.rule=Host(`bondingcurve.rsocials.online`) || Host(`socials.bondingcurve.tech`)"
       - "traefik.http.routers.postiz-bcrg.entrypoints=web,websecure"
       - "traefik.http.services.postiz-bcrg.loadbalancer.server.port=5000"
+      - "traefik.docker.network=traefik-public"
     networks:
       - traefik-public
       - postiz-bcrg-internal
@@ -70,9 +69,6 @@ services:
   postiz-bcrg-postgres:
     image: postgres:17-alpine
     container_name: postiz-bcrg-postgres
-    labels:
-      - "sablier.enable=true"
-      - "sablier.group=postiz-bcrg"
     restart: unless-stopped
     environment:
       POSTGRES_PASSWORD: "${POSTGRES_PASSWORD}"
@@ -91,9 +87,6 @@ services:
   postiz-bcrg-redis:
     image: redis:7.2
     container_name: postiz-bcrg-redis
-    labels:
-      - "sablier.enable=true"
-      - "sablier.group=postiz-bcrg"
     restart: unless-stopped
     healthcheck:
       test: redis-cli ping
@@ -108,9 +101,6 @@ services:
   postiz-bcrg-temporal-postgres:
     image: postgres:16
     container_name: postiz-bcrg-temporal-postgres
-    labels:
-      - "sablier.enable=true"
-      - "sablier.group=postiz-bcrg"
     restart: unless-stopped
     environment:
       POSTGRES_PASSWORD: temporal
@@ -123,9 +113,6 @@ services:
   postiz-bcrg-temporal:
     image: temporalio/auto-setup:1.28.1
     container_name: postiz-bcrg-temporal
-    labels:
-      - "sablier.enable=true"
-      - "sablier.group=postiz-bcrg"
     restart: unless-stopped
     depends_on:
       - postiz-bcrg-temporal-postgres

deploy/docker-compose.cc.yml

@@ -49,12 +49,11 @@ services:
       - postiz-cc-uploads:/uploads/
       - /opt/infisical/entrypoint-wrapper.sh:/infisical-entrypoint.sh:ro
     labels:
-      - "traefik.enable=false"
-      - "sablier.enable=true"
-      - "sablier.group=postiz-cc"
+      - "traefik.enable=true"
       - "traefik.http.routers.postiz-cc.rule=Host(`socials.crypto-commons.org`) || Host(`socials.valleyofthecommons.com`)"
       - "traefik.http.routers.postiz-cc.entrypoints=web,websecure"
       - "traefik.http.services.postiz-cc.loadbalancer.server.port=5000"
+      - "traefik.docker.network=traefik-public"
     networks:
       - traefik-public
       - postiz-cc-internal
@@ -70,9 +69,6 @@ services:
   postiz-cc-postgres:
     image: postgres:17-alpine
     container_name: postiz-cc-postgres
-    labels:
-      - "sablier.enable=true"
-      - "sablier.group=postiz-cc"
     restart: unless-stopped
     environment:
       POSTGRES_PASSWORD: "${POSTGRES_PASSWORD}"
@@ -91,9 +87,6 @@ services:
   postiz-cc-redis:
     image: redis:7.2
     container_name: postiz-cc-redis
-    labels:
-      - "sablier.enable=true"
-      - "sablier.group=postiz-cc"
     restart: unless-stopped
     healthcheck:
       test: redis-cli ping
@@ -108,9 +101,6 @@ services:
   postiz-cc-elasticsearch:
     image: docker.elastic.co/elasticsearch/elasticsearch:7.17.24
     container_name: postiz-cc-elasticsearch
-    labels:
-      - "sablier.enable=true"
-      - "sablier.group=postiz-cc"
     restart: unless-stopped
     environment:
       - discovery.type=single-node
@@ -129,9 +119,6 @@ services:
   postiz-cc-temporal-postgres:
     image: postgres:16
     container_name: postiz-cc-temporal-postgres
-    labels:
-      - "sablier.enable=true"
-      - "sablier.group=postiz-cc"
     restart: unless-stopped
     environment:
       POSTGRES_PASSWORD: temporal
@@ -144,9 +131,6 @@ services:
   postiz-cc-temporal:
     image: temporalio/auto-setup:1.28.1
     container_name: postiz-cc-temporal
-    labels:
-      - "sablier.enable=true"
-      - "sablier.group=postiz-cc"
     restart: unless-stopped
     depends_on:
       - postiz-cc-temporal-postgres

deploy/docker-compose.p2pf.yml

@@ -49,12 +49,11 @@ services:
       - postiz-p2pf-uploads:/uploads/
       - /opt/infisical/entrypoint-wrapper.sh:/infisical-entrypoint.sh:ro
     labels:
-      - "traefik.enable=false"
-      - "sablier.enable=true"
-      - "sablier.group=postiz-p2pf"
+      - "traefik.enable=true"
       - "traefik.http.routers.postiz-p2pf.rule=Host(`p2pf.rsocials.online`) || Host(`socials.p2pfoundation.net`)"
       - "traefik.http.routers.postiz-p2pf.entrypoints=web,websecure"
       - "traefik.http.services.postiz-p2pf.loadbalancer.server.port=5000"
+      - "traefik.docker.network=traefik-public"
     networks:
       - traefik-public
       - postiz-p2pf-internal
@@ -70,9 +69,6 @@ services:
   postiz-p2pf-postgres:
     image: postgres:17-alpine
     container_name: postiz-p2pf-postgres
-    labels:
-      - "sablier.enable=true"
-      - "sablier.group=postiz-p2pf"
     restart: unless-stopped
     environment:
       POSTGRES_PASSWORD: "${POSTGRES_PASSWORD}"
@@ -91,9 +87,6 @@ services:
   postiz-p2pf-redis:
     image: redis:7.2
     container_name: postiz-p2pf-redis
-    labels:
-      - "sablier.enable=true"
-      - "sablier.group=postiz-p2pf"
     restart: unless-stopped
     healthcheck:
       test: redis-cli ping
@@ -108,9 +101,6 @@ services:
   postiz-p2pf-temporal-postgres:
     image: postgres:16
     container_name: postiz-p2pf-temporal-postgres
-    labels:
-      - "sablier.enable=true"
-      - "sablier.group=postiz-p2pf"
     restart: unless-stopped
     environment:
       POSTGRES_PASSWORD: temporal
@@ -123,9 +113,6 @@ services:
   postiz-p2pf-temporal:
     image: temporalio/auto-setup:1.28.1
     container_name: postiz-p2pf-temporal
-    labels:
-      - "sablier.enable=true"
-      - "sablier.group=postiz-p2pf"
     restart: unless-stopped
     depends_on:
       - postiz-p2pf-temporal-postgres