Merge pull request #27 from Monadical-SAS/afreydev/release-v0.2.1

afreydev · web-flow · commit 60bdb187eb23 · 2025-08-11T10:54:16.000-05:00
chore: Release v0.2.1
diff --git a/README.md b/README.md
@@ -240,6 +240,18 @@ Use this url to access the admin settings.
 
 https://authentik.<your_domain>/if/flow/initial-setup/
 
+## CUSTOM_SUBDOMAIN Configuration Guide
+
+The `CUSTOM_SUBDOMAIN` environment variable provides a way to override the default subdomain behavior in your application. When configured, it allows you to specify a custom subdomain that will be used instead of the application's default subdomain logic.
+
+### Configuration
+
+Add the following to your application's `.env` file:
+
+```env
+CUSTOM_SUBDOMAIN=your_custom_subdomain
+```
+
 ## Available Services
 
 ### Communication
diff --git a/apps/authentik/docker-compose.yml b/apps/authentik/docker-compose.yml
@@ -57,11 +57,11 @@ services:
       # Define the service explicitly
       - traefik.http.services.authentik.loadbalancer.server.port=9000
       # HTTP router
-      - traefik.http.routers.authentik.rule=Host(`authentik.${BASE_DOMAIN}`)
+      - traefik.http.routers.authentik.rule=Host(`${CUSTOM_SUBDOMAIN:-authentik}.${BASE_DOMAIN}`)
       - traefik.http.routers.authentik.entrypoints=web
       - "${HTTPS_MIDDLEWARE:+traefik.http.routers.authentik.middlewares=${HTTPS_MIDDLEWARE}}"
       # HTTPS router
-      - traefik.http.routers.authentik-secure.rule=Host(`authentik.${BASE_DOMAIN}`)
+      - traefik.http.routers.authentik-secure.rule=Host(`${CUSTOM_SUBDOMAIN:-authentik}.${BASE_DOMAIN}`)
       - traefik.http.routers.authentik-secure.entrypoints=${HTTPS_ENTRYPOINT:-}
       - traefik.http.routers.authentik-secure.tls=${ENABLE_TLS:-}"
       - traefik.http.routers.authentik-secure.tls.certresolver=${TLS_RESOLVER:-}
diff --git a/apps/baserow/docker-compose.yml b/apps/baserow/docker-compose.yml
@@ -2,7 +2,7 @@ services:
   baserow:
     image: baserow/baserow:1.30.1
     environment:
-      BASEROW_PUBLIC_URL: '${HTTP_SCHEME}://baserow.${BASE_DOMAIN}'
+      BASEROW_PUBLIC_URL: '${HTTP_SCHEME}://${CUSTOM_SUBDOMAIN:-baserow}.${BASE_DOMAIN}'
     env_file:
       - ./.env
     networks:
@@ -13,10 +13,10 @@ services:
     labels:
       - traefik.enable=${ENABLE_TRAEFIK:-false}
       - traefik.docker.network=traefik-public
-      - traefik.http.routers.baserow.rule=Host(`baserow.${BASE_DOMAIN}`)
+      - traefik.http.routers.baserow.rule=Host(`${CUSTOM_SUBDOMAIN:-baserow}.${BASE_DOMAIN}`)
       - traefik.http.routers.baserow.entrypoints=web
       - "${HTTPS_MIDDLEWARE:+traefik.http.routers.baserow.middlewares=${HTTPS_MIDDLEWARE}}"
-      - traefik.http.routers.baserow-secure.rule=Host(`baserow.${BASE_DOMAIN}`)
+      - traefik.http.routers.baserow-secure.rule=Host(`${CUSTOM_SUBDOMAIN:-baserow}.${BASE_DOMAIN}`)
       - traefik.http.routers.baserow-secure.entrypoints=${HTTPS_ENTRYPOINT:-}
       - traefik.http.routers.baserow-secure.tls=${ENABLE_TLS:-}"
       - traefik.http.routers.baserow-secure.tls.certresolver=${TLS_RESOLVER:-}
diff --git a/apps/ghost/docker-compose.yml b/apps/ghost/docker-compose.yml
@@ -14,12 +14,12 @@ services:
       database__connection__password: "${MYSQL_PASSWORD}"
       database__connection__database: "${MYSQL_DATABASE}"
       # this url value is just an example, and is likely wrong for your environment!
-      url: "${HTTP_SCHEME}://ghost.${BASE_DOMAIN}"  # Update to use HTTPS
+      url: "${HTTP_SCHEME}://${CUSTOM_SUBDOMAIN:-ghost}.${BASE_DOMAIN}"  # Update to use HTTPS
       # contrary to the default mentioned in the linked documentation, this image defaults to NODE_ENV=production (so development mode needs to be explicitly specified if desired)
       NODE_ENV: production
       privacy__useUpdateCheck: false
       # This tells Ghost to trust the X-Forwarded-Proto header from Traefik
-      url_base: "${HTTP_SCHEME}://ghost.${BASE_DOMAIN}"
+      url_base: "${HTTP_SCHEME}://${CUSTOM_SUBDOMAIN:-ghost}.${BASE_DOMAIN}"
       server__host: "0.0.0.0"
       server__port: 2368
       trust_proxy: true
@@ -29,10 +29,10 @@ services:
       - traefik.enable=${ENABLE_TRAEFIK:-false}
       - traefik.docker.network=traefik-public
       - traefik.http.services.ghost-service.loadbalancer.server.port=2368
-      - traefik.http.routers.ghost.rule=Host(`ghost.${BASE_DOMAIN}`)
+      - traefik.http.routers.ghost.rule=Host(`${CUSTOM_SUBDOMAIN:-ghost}.${BASE_DOMAIN}`)
       - traefik.http.routers.ghost.entrypoints=web
       - "${HTTPS_MIDDLEWARE:+traefik.http.routers.ghost.middlewares=${HTTPS_MIDDLEWARE}}"
-      - traefik.http.routers.ghost-secure.rule=Host(`ghost.${BASE_DOMAIN}`)
+      - traefik.http.routers.ghost-secure.rule=Host(`${CUSTOM_SUBDOMAIN:-ghost}.${BASE_DOMAIN}`)
       - traefik.http.routers.ghost-secure.entrypoints=${HTTPS_ENTRYPOINT:-}
       - traefik.http.routers.ghost-secure.tls=${ENABLE_TLS:-}"
       - traefik.http.routers.ghost-secure.tls.certresolver=${TLS_RESOLVER:-}
diff --git a/apps/gitea/docker-compose.yml b/apps/gitea/docker-compose.yml
@@ -26,9 +26,9 @@ services:
       - GITEA__database__NAME=${GITEA_POSTGRES_DB}
       - GITEA__database__USER=${GITEA_POSTGRES_USER}
       - GITEA__database__PASSWD=${GITEA_POSTGRES_PASSWORD}
-      - GITEA__server__DOMAIN=gitea.${BASE_DOMAIN}
-      - GITEA__server__SSH_DOMAIN=gitea.${BASE_DOMAIN}
-      - GITEA__server__ROOT_URL=https://gitea.${BASE_DOMAIN}
+      - GITEA__server__DOMAIN=${CUSTOM_SUBDOMAIN:-gitea}.${BASE_DOMAIN}
+      - GITEA__server__SSH_DOMAIN=${CUSTOM_SUBDOMAIN:-gitea}.${BASE_DOMAIN}
+      - GITEA__server__ROOT_URL=https://${CUSTOM_SUBDOMAIN:-gitea}.${BASE_DOMAIN}
       - GITEA__server__PROTOCOL=http
       - GITEA__server__HTTP_PORT=3000
     volumes:
@@ -41,10 +41,10 @@ services:
     labels:
       - traefik.enable=${ENABLE_TRAEFIK:-false}
       - traefik.docker.network=traefik-public
-      - traefik.http.routers.gitea.rule=Host(`gitea.${BASE_DOMAIN}`)
+      - traefik.http.routers.gitea.rule=Host(`${CUSTOM_SUBDOMAIN:-gitea}.${BASE_DOMAIN}`)
       - traefik.http.routers.gitea.entrypoints=web
       - "${HTTPS_MIDDLEWARE:+traefik.http.routers.gitea.middlewares=${HTTPS_MIDDLEWARE}}"
-      - traefik.http.routers.gitea-secure.rule=Host(`gitea.${BASE_DOMAIN}`)
+      - traefik.http.routers.gitea-secure.rule=Host(`${CUSTOM_SUBDOMAIN:-gitea}.${BASE_DOMAIN}`)
       - traefik.http.routers.gitea-secure.entrypoints=${HTTPS_ENTRYPOINT:-}
       - traefik.http.routers.gitea-secure.tls=${ENABLE_TLS:-}
       - traefik.http.routers.gitea-secure.tls.certresolver=${TLS_RESOLVER:-}
diff --git a/apps/hedgedoc/docker-compose.yml b/apps/hedgedoc/docker-compose.yml
@@ -18,7 +18,7 @@ services:
      - ./.env
     environment:
       - CMD_DB_URL=postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@hedgedoc_database:5432/${POSTGRES_DB}
-      - CMD_DOMAIN=hedgedoc.${BASE_DOMAIN}
+      - CMD_DOMAIN=${CUSTOM_SUBDOMAIN:-hedgedoc}.${BASE_DOMAIN}
       - CMD_PROTOCOL_USESSL=true
       - CMD_URL_ADDPORT=false
       - CMD_SESSION_SECRET=${HD_SESSION_SECRET}
@@ -32,10 +32,10 @@ services:
     labels:
       - traefik.enable=${ENABLE_TRAEFIK:-false}
       - traefik.docker.network=traefik-public
-      - traefik.http.routers.hedgedoc.rule=Host(`hedgedoc.${BASE_DOMAIN}`)
+      - traefik.http.routers.hedgedoc.rule=Host(`${CUSTOM_SUBDOMAIN:-hedgedoc}.${BASE_DOMAIN}`)
       - traefik.http.routers.hedgedoc.entrypoints=web
       - "${HTTPS_MIDDLEWARE:+traefik.http.routers.hedgedoc.middlewares=${HTTPS_MIDDLEWARE}}"
-      - traefik.http.routers.hedgedoc-secure.rule=Host(`hedgedoc.${BASE_DOMAIN}`)
+      - traefik.http.routers.hedgedoc-secure.rule=Host(`${CUSTOM_SUBDOMAIN:-hedgedoc}.${BASE_DOMAIN}`)
       - traefik.http.routers.hedgedoc-secure.entrypoints=${HTTPS_ENTRYPOINT:-}
       - traefik.http.routers.hedgedoc-secure.tls=${ENABLE_TLS:-}"
       - traefik.http.routers.hedgedoc-secure.tls.certresolver=${TLS_RESOLVER:-}
diff --git a/apps/homer/docker-compose.yml b/apps/homer/docker-compose.yml
@@ -13,10 +13,10 @@ services:
     labels:
       - traefik.enable=${ENABLE_TRAEFIK:-false}
       - traefik.docker.network=traefik-public
-      - traefik.http.routers.homer.rule=Host(`dashboard.${BASE_DOMAIN}`)
+      - traefik.http.routers.homer.rule=Host(`${CUSTOM_SUBDOMAIN:-dashboard}.${BASE_DOMAIN}`)
       - traefik.http.routers.homer.entrypoints=web
       - "${HTTPS_MIDDLEWARE:+traefik.http.routers.homer.middlewares=${HTTPS_MIDDLEWARE}}"
-      - traefik.http.routers.homer-secure.rule=Host(`dashboard.${BASE_DOMAIN}`)
+      - traefik.http.routers.homer-secure.rule=Host(`${CUSTOM_SUBDOMAIN:-dashboard}.${BASE_DOMAIN}`)
       - traefik.http.routers.homer-secure.entrypoints=${HTTPS_ENTRYPOINT:-}
       - traefik.http.routers.homer-secure.tls=${ENABLE_TLS:-}"
       - traefik.http.routers.homer-secure.tls.certresolver=${TLS_RESOLVER:-}
diff --git a/apps/librechat/docker-compose.yml b/apps/librechat/docker-compose.yml
@@ -9,8 +9,8 @@ services:
       - PORT=${LIBRECHAT_PORT:-3080}
       - MONGO_URI=mongodb://librechat_mongodb:27017/LibreChat
       - MEILI_HOST=http://librechat_meilisearch:7700
-      - DOMAIN_CLIENT=https://librechat.${BASE_DOMAIN}
-      - DOMAIN_SERVER=https://librechat.${BASE_DOMAIN}
+      - DOMAIN_CLIENT=https://${CUSTOM_SUBDOMAIN:-librechat}.${BASE_DOMAIN}
+      - DOMAIN_SERVER=https://${CUSTOM_SUBDOMAIN:-librechat}.${BASE_DOMAIN}
       # Authentication settings
       - ALLOW_EMAIL_LOGIN=${ALLOW_EMAIL_LOGIN:-true}
       - ALLOW_REGISTRATION=${ALLOW_REGISTRATION:-true}
@@ -42,10 +42,10 @@ services:
     labels:
       - traefik.enable=${ENABLE_TRAEFIK:-false}
       - traefik.docker.network=traefik-public
-      - traefik.http.routers.librechat.rule=Host(`librechat.${BASE_DOMAIN}`)
+      - traefik.http.routers.librechat.rule=Host(`${CUSTOM_SUBDOMAIN:-librechat}.${BASE_DOMAIN}`)
       - traefik.http.routers.librechat.entrypoints=web
       - "${HTTPS_MIDDLEWARE:+traefik.http.routers.librechat.middlewares=${HTTPS_MIDDLEWARE}}"
-      - traefik.http.routers.librechat-secure.rule=Host(`librechat.${BASE_DOMAIN}`)
+      - traefik.http.routers.librechat-secure.rule=Host(`${CUSTOM_SUBDOMAIN:-librechat}.${BASE_DOMAIN}`)
       - traefik.http.routers.librechat-secure.entrypoints=${HTTPS_ENTRYPOINT:-}
       - traefik.http.routers.librechat-secure.tls=${ENABLE_TLS:-}
       - traefik.http.routers.librechat-secure.tls.certresolver=${TLS_RESOLVER:-}
diff --git a/apps/matomo/docker-compose.yml b/apps/matomo/docker-compose.yml
@@ -50,10 +50,10 @@ services:
     labels:
       - traefik.enable=${ENABLE_TRAEFIK:-false}
       - traefik.docker.network=traefik-public
-      - traefik.http.routers.matomo.rule=Host(`matomo.${BASE_DOMAIN}`)
+      - traefik.http.routers.matomo.rule=Host(`${CUSTOM_SUBDOMAIN:-matomo}.${BASE_DOMAIN}`)
       - traefik.http.routers.matomo.entrypoints=web
       - "${HTTPS_MIDDLEWARE:+traefik.http.routers.matomo.middlewares=${HTTPS_MIDDLEWARE}}"
-      - traefik.http.routers.matomo-secure.rule=Host(`matomo.${BASE_DOMAIN}`)
+      - traefik.http.routers.matomo-secure.rule=Host(`${CUSTOM_SUBDOMAIN:-matomo}.${BASE_DOMAIN}`)
       - traefik.http.routers.matomo-secure.entrypoints=${HTTPS_ENTRYPOINT:-}
       - traefik.http.routers.matomo-secure.tls=${ENABLE_TLS:-}
       - traefik.http.routers.matomo-secure.tls.certresolver=${TLS_RESOLVER:-}
diff --git a/apps/nextcloud/docker-compose.yml b/apps/nextcloud/docker-compose.yml
@@ -11,8 +11,8 @@ services:
       - MYSQL_USER=${MYSQL_USER}
       - MYSQL_PASSWORD=${MYSQL_PASSWORD}
       - REDIS_HOST=redis
-      - APACHE_SERVER_NAME=nextcloud.${BASE_DOMAIN}
-      - NEXTCLOUD_TRUSTED_DOMAINS=nextcloud.${BASE_DOMAIN}
+      - APACHE_SERVER_NAME=${CUSTOM_SUBDOMAIN:-nextcloud}.${BASE_DOMAIN}
+      - NEXTCLOUD_TRUSTED_DOMAINS=${CUSTOM_SUBDOMAIN:-nextcloud}.${BASE_DOMAIN}
       - TRUSTED_PROXIES=${TRUSTED_PROXIES}
     depends_on:
       - db
@@ -23,10 +23,10 @@ services:
     labels:
       - traefik.enable=${ENABLE_TRAEFIK:-false}
       - traefik.docker.network=traefik-public
-      - traefik.http.routers.nextcloud.rule=Host(`nextcloud.${BASE_DOMAIN}`)
+      - traefik.http.routers.nextcloud.rule=Host(`${CUSTOM_SUBDOMAIN:-nextcloud}.${BASE_DOMAIN}`)
       - traefik.http.routers.nextcloud.entrypoints=web
       - "${HTTPS_MIDDLEWARE:+traefik.http.routers.nextcloud.middlewares=${HTTPS_MIDDLEWARE}}"
-      - traefik.http.routers.nextcloud-secure.rule=Host(`nextcloud.${BASE_DOMAIN}`)
+      - traefik.http.routers.nextcloud-secure.rule=Host(`${CUSTOM_SUBDOMAIN:-nextcloud}.${BASE_DOMAIN}`)
       - traefik.http.routers.nextcloud-secure.entrypoints=${HTTPS_ENTRYPOINT:-}
       - traefik.http.routers.nextcloud-secure.tls=${ENABLE_TLS:-}"
       - traefik.http.routers.nextcloud-secure.tls.certresolver=${TLS_RESOLVER:-}
diff --git a/apps/onlyoffice/docker-compose.yml b/apps/onlyoffice/docker-compose.yml
@@ -28,10 +28,10 @@ services:
     labels:
       - traefik.enable=${ENABLE_TRAEFIK:-false}
       - traefik.docker.network=traefik-public
-      - traefik.http.routers.onlyoffice.rule=Host(`onlyoffice.${BASE_DOMAIN}`)
+      - traefik.http.routers.onlyoffice.rule=Host(`${CUSTOM_SUBDOMAIN:-onlyoffice}.${BASE_DOMAIN}`)
       - traefik.http.routers.onlyoffice.entrypoints=web
       - "${HTTPS_MIDDLEWARE:+traefik.http.routers.onlyoffice.middlewares=${HTTPS_MIDDLEWARE}}"
-      - traefik.http.routers.onlyoffice-secure.rule=Host(`onlyoffice.${BASE_DOMAIN}`)
+      - traefik.http.routers.onlyoffice-secure.rule=Host(`${CUSTOM_SUBDOMAIN:-onlyoffice}.${BASE_DOMAIN}`)
       - traefik.http.routers.onlyoffice-secure.entrypoints=${HTTPS_ENTRYPOINT:-}
       - traefik.http.routers.onlyoffice-secure.tls=${ENABLE_TLS:-}"
       - traefik.http.routers.onlyoffice-secure.tls.certresolver=${TLS_RESOLVER:-}
diff --git a/apps/portainer/docker-compose.yml b/apps/portainer/docker-compose.yml
@@ -12,10 +12,10 @@ services:
     labels:
       - traefik.enable=${ENABLE_TRAEFIK:-false}
       - traefik.docker.network=traefik-public
-      - traefik.http.routers.portainer.rule=Host(`portainer.${BASE_DOMAIN}`)
+      - traefik.http.routers.portainer.rule=Host(`${CUSTOM_SUBDOMAIN:-portainer}.${BASE_DOMAIN}`)
       - traefik.http.routers.portainer.entrypoints=web
       - "${HTTPS_MIDDLEWARE:+traefik.http.routers.portainer.middlewares=${HTTPS_MIDDLEWARE}}"
-      - traefik.http.routers.portainer-secure.rule=Host(`portainer.${BASE_DOMAIN}`)
+      - traefik.http.routers.portainer-secure.rule=Host(`${CUSTOM_SUBDOMAIN:-portainer}.${BASE_DOMAIN}`)
       - traefik.http.routers.portainer-secure.entrypoints=${HTTPS_ENTRYPOINT:-}
       - traefik.http.routers.portainer-secure.tls=${ENABLE_TLS:-}
       - traefik.http.routers.portainer-secure.tls.certresolver=${TLS_RESOLVER:-}
diff --git a/apps/twenty/docker-compose.yml b/apps/twenty/docker-compose.yml
@@ -25,7 +25,7 @@ services:
       - SERVICE_FQDN_SERVER_3000
       - NODE_PORT=3000
       - PG_DATABASE_URL=postgres://${PG_DATABASE_USER:-postgres}:${PG_DATABASE_PASSWORD:-postgres}@${PG_DATABASE_HOST:-db}:${PG_DATABASE_PORT:-5432}/default
-      - SERVER_URL=${HTTP_SCHEME}://twenty.${BASE_DOMAIN}
+      - SERVER_URL=${HTTP_SCHEME}://${CUSTOM_SUBDOMAIN:-twenty}.${BASE_DOMAIN}
       - REDIS_URL=${REDIS_URL:-redis://redis:6379}
       - STORAGE_TYPE=${STORAGE_TYPE}
       - STORAGE_S3_REGION=${STORAGE_S3_REGION}
@@ -58,11 +58,11 @@ services:
     labels:
       - traefik.enable=${ENABLE_TRAEFIK:-false}
       - traefik.docker.network=traefik-public
-      - traefik.http.routers.twenty.rule=Host(`twenty.${BASE_DOMAIN}`)
+      - traefik.http.routers.twenty.rule=Host(`${CUSTOM_SUBDOMAIN:-twenty}.${BASE_DOMAIN}`)
       - traefik.http.routers.twenty.entrypoints=web
       - traefik.http.services.twenty.loadbalancer.server.port=3000
       - "${HTTPS_MIDDLEWARE:+traefik.http.routers.twenty.middlewares=${HTTPS_MIDDLEWARE}}"
-      - traefik.http.routers.twenty-secure.rule=Host(`twenty.${BASE_DOMAIN}`)
+      - traefik.http.routers.twenty-secure.rule=Host(`${CUSTOM_SUBDOMAIN:-twenty}.${BASE_DOMAIN}`)
       - traefik.http.routers.twenty-secure.entrypoints=${HTTPS_ENTRYPOINT:-}
       - traefik.http.routers.twenty-secure.tls=${ENABLE_TLS:-}"
       - traefik.http.routers.twenty-secure.tls.certresolver=${TLS_RESOLVER:-}
@@ -124,7 +124,7 @@ services:
     command: [ "yarn", "worker:prod" ]
     environment:
       PG_DATABASE_URL: postgres://${PG_DATABASE_USER:-postgres}:${PG_DATABASE_PASSWORD:-postgres}@${PG_DATABASE_HOST:-db}:${PG_DATABASE_PORT:-5432}/default
-      SERVER_URL: https://twenty.${BASE_DOMAIN}
+      SERVER_URL: https://${CUSTOM_SUBDOMAIN:-twenty}.${BASE_DOMAIN}
       REDIS_URL: ${REDIS_URL:-redis://redis:6379}
       DISABLE_DB_MIGRATIONS: "true" # it already runs on the server
 
diff --git a/apps/wordpress/docker-compose.yml b/apps/wordpress/docker-compose.yml
@@ -38,10 +38,10 @@ services:
     labels:
       - traefik.enable=${ENABLE_TRAEFIK:-false}
       - traefik.docker.network=traefik-public
-      - traefik.http.routers.wordpress.rule=Host(`wordpress.${BASE_DOMAIN}`)
+      - traefik.http.routers.wordpress.rule=Host(`${CUSTOM_SUBDOMAIN:-wordpress}.${BASE_DOMAIN}`)
       - traefik.http.routers.wordpress.entrypoints=web
       - "${HTTPS_MIDDLEWARE:+traefik.http.routers.wordpress.middlewares=${HTTPS_MIDDLEWARE}}"
-      - traefik.http.routers.wordpress-secure.rule=Host(`wordpress.${BASE_DOMAIN}`)
+      - traefik.http.routers.wordpress-secure.rule=Host(`${CUSTOM_SUBDOMAIN:-wordpress}.${BASE_DOMAIN}`)
       - traefik.http.routers.wordpress-secure.entrypoints=${HTTPS_ENTRYPOINT:-}
       - traefik.http.routers.wordpress-secure.tls=${ENABLE_TLS:-}
       - traefik.http.routers.wordpress-secure.tls.certresolver=${TLS_RESOLVER:-}
diff --git a/apps/zulip/docker-compose.yml b/apps/zulip/docker-compose.yml
@@ -143,10 +143,10 @@ services:
     labels:
       - traefik.enable=${ENABLE_TRAEFIK:-false}
       - traefik.docker.network=traefik-public
-      - traefik.http.routers.zulip.rule=Host(`zulip.${BASE_DOMAIN}`)
+      - traefik.http.routers.zulip.rule=Host(`${CUSTOM_SUBDOMAIN:-zulip}.${BASE_DOMAIN}`)
       - traefik.http.routers.zulip.entrypoints=web
       - "${HTTPS_MIDDLEWARE:+traefik.http.routers.zulip.middlewares=${HTTPS_MIDDLEWARE}}"
-      - traefik.http.routers.zulip-secure.rule=Host(`zulip.${BASE_DOMAIN}`)
+      - traefik.http.routers.zulip-secure.rule=Host(`${CUSTOM_SUBDOMAIN:-zulip}.${BASE_DOMAIN}`)
       - traefik.http.routers.zulip-secure.entrypoints=websecure
       - traefik.http.routers.zulip-secure.tls=true
       - "${TLS_RESOLVER:+traefik.http.routers.zulip-secure.tls.certresolver=${TLS_RESOLVER}}"
diff --git a/bin/tools.sh b/bin/tools.sh
@@ -35,6 +35,7 @@ add_key_in_env() {
         echo "${KEY}=${VALUE}" >> "$ENV_FILE"
         echo "Added $KEY to $ENV_FILE"
     fi
+    chmod a+w "$ENV_FILE"
 }
 
 delete_key_in_env() {
@@ -79,6 +80,7 @@ update_env_record() {
         echo "${key}=${value}" >> "$env_file"
         echo "Added new key '$key' with value '$value' to $env_file"
     fi
+    chmod a+w "$env_file"
     
     return 0
 }
@@ -113,6 +115,7 @@ run_app_hook() {
         echo "Script app_hook.sh does not exist in directory: $directory_path"
         touch "${directory_path}/.env"
     fi
+    chmod a+w "${directory_path}/.env"
 }
 
 generate_supervisor_config() {
diff --git a/tools/update_homer_config.py b/tools/update_homer_config.py
@@ -33,6 +33,29 @@ def load_txt(file_path):
        return None
 
 
+def get_custom_subdomain_from_env(app_name):
+   """Read CUSTOM_SUBDOMAIN from app's .env file if it exists"""
+   env_file_path = f"{SELFHOSTYOURTECH_ROOT}/apps/{app_name}/.env"
+   
+   if not os.path.exists(env_file_path):
+       return None
+   
+   try:
+       with open(env_file_path, 'r') as file:
+           for line in file:
+               line = line.strip()
+               if line.startswith('CUSTOM_SUBDOMAIN='):
+                   # Extract value after the equals sign
+                   value = line.split('=', 1)[1]
+                   # Remove quotes if present
+                   value = value.strip('"\'')
+                   return value if value else None
+   except Exception as e:
+       print(f"Error reading .env file for {app_name}: {e}")
+   
+   return None
+
+
 def generate_homer_config():
    """Generate Homer configuration based on enabled apps"""
    # Load configurations
@@ -115,6 +138,11 @@ def generate_homer_config():
            alias = app_info.get("alias", "")
            if alias != "":
                subdomain = alias
+           
+           # Check for CUSTOM_SUBDOMAIN in app's .env file
+           custom_subdomain = get_custom_subdomain_from_env(app_name)
+           if custom_subdomain:
+               subdomain = custom_subdomain
                
            # Create app entry
            app_entry = {
