Fix deployment: use domverse network, public Outline URL, direct deploy

- Switch from domnet → domverse (runs on domverse-berlin.eu)
- OUTLINE_URL defaults to https://outline.domverse.de (public API)
- Traefik labels match domverse-berlin.eu pattern
- Revert workflow to direct docker compose (no SSH needed)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

docker-compose.yml

@@ -1,23 +1,26 @@
+name: outline-sync
+
 services:
   outline-sync-ui:
     build: .
     container_name: outline-sync-ui
     restart: unless-stopped
-    networks:
-      - domnet
     environment:
-      - OUTLINE_URL=${OUTLINE_URL:-http://outline:3000}
+      - OUTLINE_URL=${OUTLINE_URL:-https://outline.domverse.de}
       - OUTLINE_TOKEN=${OUTLINE_TOKEN}
-    ports:
-      - "8181:8080"
+    networks:
+      - default
+      - domverse
     labels:
+      - "traefik.docker.network=domverse"
       - "traefik.enable=true"
-      - "traefik.http.routers.outline-sync.rule=Host(`sync.domverse.de`)"
+      - "traefik.http.routers.outline-sync.rule=Host(`sync.domverse-berlin.eu`)"
       - "traefik.http.routers.outline-sync.entrypoints=https"
-      - "traefik.http.routers.outline-sync.tls=true"
-      - "traefik.http.routers.outline-sync.middlewares=secHeaders@file,middlewares-authentik-new@file"
+      - "traefik.http.routers.outline-sync.tls.certresolver=http"
+      - "traefik.http.routers.outline-sync.middlewares=authentik@docker"
       - "traefik.http.services.outline-sync.loadbalancer.server.port=8080"
 
 networks:
-  domnet:
+  default: {}
+  domverse:
     external: true