add pepisco to production

Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>

conf.d/pepisco.conf

@@ -0,0 +1,21 @@
+server {
+    listen 80;
+    server_name pepisco.psi.ch;
+    return 301 https://$host$request_uri;
+}
+
+server {
+    listen 443 ssl;
+    server_name pepisco.psi.ch;
+
+    ssl_certificate /etc/nginx/certs/lx-docker-dmz-01.psi.ch.crt;
+    ssl_certificate_key /etc/nginx/private/lx-docker-dmz-01.psi.ch.key;
+
+    location / {
+        proxy_pass http://pepisco:5555;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+}

docker-compose.yaml

@@ -71,6 +71,15 @@ services:
     networks:
       - backend
 
+  # PEPISCO <andras.boedi@psi.ch> <patrick.hemberger@psi.ch>
+  # PhotoElectron PhotoIon Spectral COmpendium
+  pepisco:
+    image: gitea.psi.ch/images/pepisco:v2026.03.13
+    container_name: pepisco
+    restart: always
+    networks:
+      - backend
+
 networks:
   public:
   backend: