From 392d03eb285dc23bc06a4da77fbc69bc082f236a Mon Sep 17 00:00:00 2001
From: Basil Bruhn <basil.bruhn@psi.ch>
Date: Thu, 19 Mar 2026 09:37:35 +0100
Subject: [PATCH] add pepisco to production

Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
---
 conf.d/pepisco.conf | 21 +++++++++++++++++++++
 docker-compose.yaml |  9 +++++++++
 2 files changed, 30 insertions(+)
 create mode 100644 conf.d/pepisco.conf

diff --git a/conf.d/pepisco.conf b/conf.d/pepisco.conf
new file mode 100644
index 0000000..04de546
--- /dev/null
+++ b/conf.d/pepisco.conf
@@ -0,0 +1,21 @@
+server {
+    listen 80;
+    server_name pepisco.psi.ch;
+    return 301 https://$host$request_uri;
+}
+
+server {
+    listen 443 ssl;
+    server_name pepisco.psi.ch;
+
+    ssl_certificate /etc/nginx/certs/lx-docker-dmz-01.psi.ch.crt;
+    ssl_certificate_key /etc/nginx/private/lx-docker-dmz-01.psi.ch.key;
+
+    location / {
+        proxy_pass http://pepisco:5555;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+}
diff --git a/docker-compose.yaml b/docker-compose.yaml
index aa492e3..f0539f0 100644
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -71,6 +71,15 @@ services:
     networks:
       - backend
 
+  # PEPISCO <andras.boedi@psi.ch> <patrick.hemberger@psi.ch>
+  # PhotoElectron PhotoIon Spectral COmpendium
+  pepisco:
+    image: gitea.psi.ch/images/pepisco:v2026.03.13
+    container_name: pepisco
+    restart: always
+    networks:
+      - backend
+
 networks:
   public:
   backend: