Fix zerotier UI port and traefik basicAuth mount

- zerotier: Change exposed port from 3180 to 3000 (actual UI port)
- zerotier: Add loadbalancer.server.port label for traefik
- traefik: Add basicAuth volume mount for dashboard-auth middleware
- test-services.sh: Fix registry URL to use /v2/ endpoint

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

scripts/test-services.sh

@@ -26,7 +26,7 @@ URLS=(
     "https://inv.$DOMAIN"
     "https://memento.$DOMAIN"
     "https://radicale.$DOMAIN"
-    "https://registry.$DOMAIN"
+    "https://registry.$DOMAIN/v2/"
     "https://smoke.$DOMAIN"
     "https://syncthing.$DOMAIN"
     "https://wallabag.$DOMAIN"

stacks/traefik/docker-compose.yml

@@ -18,6 +18,7 @@ services:
       - ./traefik.yml:/traefik.yml:ro
       - ./acme.json:/acme.json
       - ./conf.d/:/conf.d/
+      - ./basicAuth:/basicAuth:ro
       - /var/log:/var/log
 
 networks:

stacks/zerotier/docker-compose.yml

@@ -4,7 +4,7 @@ services:
     container_name: zerotier-ui
     restart: always
     expose:
-      - 3180
+      - 3000
     volumes:
       - ./ztncui:/opt/key-networks/ztncui/etc
       - ./zt1:/var/lib/zerotier-one
@@ -18,6 +18,7 @@ services:
       - "traefik.http.routers.zerotier.rule=Host(`zerotierui.${DOMAIN}`)"
       - "traefik.http.routers.zerotier.tls.certresolver=http"
       - "traefik.http.routers.zerotier.middlewares=dashboard-auth@file"
+      - "traefik.http.services.zerotier.loadbalancer.server.port=3000"
 
 networks:
   web: