From e1df24ccb5653acc2a47af565d3b64d58c5c1f07 Mon Sep 17 00:00:00 2001
From: Mahmoud Mabrouk <mahmoud@agenta.ai>
Date: Mon, 15 Jun 2026 11:49:54 +0200
Subject: [PATCH 1/2] fix(hosting): scope gh.local traefik to its own compose
 project

---
 hosting/docker-compose/ee/docker-compose.gh.local.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/hosting/docker-compose/ee/docker-compose.gh.local.yml b/hosting/docker-compose/ee/docker-compose.gh.local.yml
index 7e72548082..20465efb50 100644
--- a/hosting/docker-compose/ee/docker-compose.gh.local.yml
+++ b/hosting/docker-compose/ee/docker-compose.gh.local.yml
@@ -409,6 +409,7 @@ services:
             - --api.dashboard=true
             - --api.insecure=true
             - --providers.docker
+            - --providers.docker.constraints=Label(`com.docker.compose.project`,`${COMPOSE_PROJECT_NAME:-agenta-ee-gh-local}`)
             - --entrypoints.web.address=:80
         # === STORAGE ============================================== #
         volumes:

From 1465b062c206821f02d8be5723a0ba276ec5ef61 Mon Sep 17 00:00:00 2001
From: Mahmoud Mabrouk <mahmoud@agenta.ai>
Date: Wed, 17 Jun 2026 20:47:41 +0200
Subject: [PATCH 2/2] fix(hosting): scope every traefik instance to its own
 compose project

---
 hosting/docker-compose/ee/docker-compose.gh.yml        | 1 +
 hosting/docker-compose/oss/docker-compose.gh.local.yml | 1 +
 hosting/docker-compose/oss/docker-compose.gh.yml       | 1 +
 hosting/docker-compose/oss/ssl/traefik.yml             | 3 ++-
 4 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/hosting/docker-compose/ee/docker-compose.gh.yml b/hosting/docker-compose/ee/docker-compose.gh.yml
index a74e799626..83adfeda76 100644
--- a/hosting/docker-compose/ee/docker-compose.gh.yml
+++ b/hosting/docker-compose/ee/docker-compose.gh.yml
@@ -400,6 +400,7 @@ services:
         command:
             - --api.dashboard=true
             - --providers.docker
+            - --providers.docker.constraints=Label(`com.docker.compose.project`,`${COMPOSE_PROJECT_NAME:-agenta-ee-gh}`)
             - --entrypoints.web.address=:80
         # === STORAGE ============================================== #
         volumes:
diff --git a/hosting/docker-compose/oss/docker-compose.gh.local.yml b/hosting/docker-compose/oss/docker-compose.gh.local.yml
index 4bc21b5293..98efae76df 100644
--- a/hosting/docker-compose/oss/docker-compose.gh.local.yml
+++ b/hosting/docker-compose/oss/docker-compose.gh.local.yml
@@ -409,6 +409,7 @@ services:
         command:
             - --api.dashboard=true
             - --providers.docker
+            - --providers.docker.constraints=Label(`com.docker.compose.project`,`${COMPOSE_PROJECT_NAME:-agenta-oss-gh-local}`)
             - --entrypoints.web.address=:80
         # === STORAGE ============================================== #
         volumes:
diff --git a/hosting/docker-compose/oss/docker-compose.gh.yml b/hosting/docker-compose/oss/docker-compose.gh.yml
index d39ffb8643..b217180177 100644
--- a/hosting/docker-compose/oss/docker-compose.gh.yml
+++ b/hosting/docker-compose/oss/docker-compose.gh.yml
@@ -430,6 +430,7 @@ services:
         command:
             - --api.dashboard=true
             - --providers.docker
+            - --providers.docker.constraints=Label(`com.docker.compose.project`,`${COMPOSE_PROJECT_NAME:-agenta-oss-gh}`)
             - --entrypoints.web.address=:80
         # === STORAGE ============================================== #
         volumes:
diff --git a/hosting/docker-compose/oss/ssl/traefik.yml b/hosting/docker-compose/oss/ssl/traefik.yml
index e479f9af83..acbe3fa6f7 100644
--- a/hosting/docker-compose/oss/ssl/traefik.yml
+++ b/hosting/docker-compose/oss/ssl/traefik.yml
@@ -25,4 +25,5 @@ certificatesResolvers:
         entryPoint: "web" # Validates domain ownership via port 80
 
 providers:
-  docker: {}
+  docker:
+    constraints: "Label(`com.docker.compose.project`,`agenta-gh-ssl`)"