Add pgAdmin service configuration and update environment variables in .env.example

docker-compose.yml

@@ -11,6 +11,7 @@ volumes:
   portainer_data:
   uptime_kuma_data:
   umami_data:
+  pgadmin_data:
 
 ########################
 # Services
@@ -67,6 +68,7 @@ services:
       - --entrypoints.sieve.address=:4190
 
       # Dashboard/API (internal)
+      - --api=true
       - --api.dashboard=true
 
       # ACME via HTTP-01 (no registrar API needed)
@@ -196,3 +198,26 @@ services:
       POSTGRES_PASSWORD: ${UMAMI_DB_PASS}
     volumes:
       - umami_data:/var/lib/postgresql/data
+
+  ## ─────────────────────────────────────────────
+  ## pgAdmin — PostgreSQL administration
+  ## ─────────────────────────────────────────────
+  pgadmin:
+    image: dpage/pgadmin4:latest
+    container_name: pgadmin
+    restart: unless-stopped
+    networks: [traefik_proxy]
+    environment:
+      PGADMIN_DEFAULT_EMAIL: ${PGADMIN_DEFAULT_EMAIL}
+      PGADMIN_DEFAULT_PASSWORD: ${PGADMIN_DEFAULT_PASSWORD}
+      PGADMIN_CONFIG_SERVER_MODE: 'False'
+      PGADMIN_CONFIG_MASTER_PASSWORD_REQUIRED: 'False'
+    volumes:
+      - pgadmin_data:/var/lib/pgadmin
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.pgadmin.rule=Host(`pgadmin.gate.${DOMAIN}`)
+      - traefik.http.routers.pgadmin.entrypoints=websecure
+      - traefik.http.routers.pgadmin.tls.certresolver=le
+      - traefik.http.routers.pgadmin.middlewares=basic-auth,security-headers
+      - traefik.http.services.pgadmin.loadbalancer.server.port=80