public gateway setup issues

[redpimpernel]

Hi,
I am trying to setup Password Pusher as documented here: pw-push docs
I have the internal/main container working. However, as soon as I spin up the public gateway container, the main container won't load properly; if I refresh the browser page, ever second refresh throws a "not found" error, it's impossible to get to the dashboard and when pushing a password it either does not do it, or does not show the resulting url.

As soon as I turn off the public gateway container, the main container works fine again. I have included my docker compose config. I am completely unsure what the issue is. Any help would be greatly appriciated.
Cheers.

services:
  pw-push-db:
    container_name: pw-push-db
    environment:
      POSTGRES_DB: pwpush_db
      POSTGRES_PASSWORD: Pod-Apron-Crying5-Paddle-Snare
      POSTGRES_USER: Baffling-Uneasy-Wobbly-Amuck-Footer7
    image: docker.io/postgres:16
    labels:
      docker-volume-backup.stop-during-backup: "true"
    networks:
      pw-push: null
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    volumes:
      - type: volume
        source: pw_push_db
        target: /var/lib/postgresql/data
        volume: {}
  pwpush:
    container_name: pw-push
    environment:
      DATABASE_URL: postgres://Baffling-Uneasy-Wobbly-Amuck-Footer7:Pod-Apron-Crying5-Paddle-Snare@pw-push-db:5432/pwpush_db
      PWP__ALLOW_ANONYMOUS: "false"
      PWP__BRAND__DARK_LOGO: /logos/logo_dark.png
      PWP__BRAND__ICON_57x57: /logos/favicon.png
      PWP__BRAND__ICON_96x96: /logos/favicon.png
      PWP__BRAND__LIGHT_LOGO: /logos/logo_light.png
      PWP__BRAND__TAGLINE: ' Send passwords securely'
      PWP__BRAND__TITLE: ' Password Pusher'
      PWP__DISABLE_SIGNUPS: "false"
      PWP__ENABLE_LOGINS: "true"
      PWP__LOGIN_SESSION_TIMEOUT: 2 hours
      PWP__MAIL__MAILER_SENDER: passwords@<domain>
      PWP__MAIL__OPEN_TIMEOUT: "10"
      PWP__MAIL__RAISE_DELIVERY_ERRORS: "true"
      PWP__MAIL__READ_TIMEOUT: "10"
      PWP__MAIL__SMTP_ADDRESS: smtp.zeptomail.com.au
      PWP__MAIL__SMTP_AUTHENTICATION: plain
      PWP__MAIL__SMTP_ENABLE_STARTTLS_AUTO: "true"
      PWP__MAIL__SMTP_PASSWORD: <password>
      PWP__MAIL__SMTP_PORT: "587"
      PWP__MAIL__SMTP_STARTTLS: "yes"
      PWP__MAIL__SMTP_USER_NAME: emailapikey`
      PWP__OVERRIDE_BASE_URL: pw-push.<internal_domain>
      PWP__SIGNUP_EMAIL_REGEXP: 
      PWP__THEME: default
    image: docker.io/pglombardo/pwpush:latest
    labels:
      docker-volume-backup.stop-during-backup: "true"
      traefik.docker.network: traefik
      traefik.enable: "true"
      traefik.http.routers.pw-push-vpn.entrypoints: netbird_secure
      traefik.http.routers.pw-push-vpn.rule: Host(`pw-push.<internal_domain>`)
      traefik.http.routers.pw-push-vpn.service: pw-push-srv
      traefik.http.routers.pw-push-vpn.tls: "true"
      traefik.http.routers.pw-push-vpn.tls.certresolver: linode_dns_prd
      traefik.http.services.pw-push-srv.loadbalancer.server.port: "5100"
    networks:
      pw-push: null
      traefik: null
    restart: unless-stopped
    secrets:
      - source: smtp_key
        target: /run/secrets/smtp_key
    security_opt:
      - no-new-privileges:true
    volumes:
      - type: bind
        source: /root/docker/pw-push/logos
        target: /opt/PasswordPusher/public/logos
        read_only: true
        bind:
          create_host_path: true
  pwpush-public:
    container_name: pw-push-public
    environment:
      DATABASE_URL: postgres://Baffling-Uneasy-Wobbly-Amuck-Footer7:Pod-Apron-Crying5-Paddle-Snare@pw-push-db:5432/pwpush_db
      PWP__ALLOW_ANONYMOUS: "false"
      PWP__BRAND__DARK_LOGO: /logos/logo_dark.png
      PWP__BRAND__ICON_57x57: /logos/favicon.png
      PWP__BRAND__ICON_96x96: /logos/favicon.png
      PWP__BRAND__LIGHT_LOGO: /logos/logo_light.png
      PWP__BRAND__TAGLINE: ' Send passwords securely'
      PWP__BRAND__TITLE: ' Password Pusher'
      PWP__THEME: default
    image: docker.io/pglombardo/pwpush-public-gateway:latest
    labels:
      docker-volume-backup.stop-during-backup: "true"
      traefik.docker.network: traefik
      traefik.enable: "true"
      traefik.http.routers.pw-push-ex.entrypoints: external
      traefik.http.routers.pw-push-ex.rule: Host(`pw-push.<external_domain>`)
      traefik.http.routers.pw-push-ex.tls: "true"
      traefik.http.routers.pw-push-ex.tls.certresolver: linode_dns_prd
      traefik.http.services.pw-push-srv.loadbalancer.server.port: "5100"
    networks:
      pw-push: null
      traefik: null
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    volumes:
      - type: bind
        source: /root/docker/pw-push/logos
        target: /opt/PasswordPusher/public/logos
        read_only: true
        bind:
          create_host_path: true

[redpimpernel]

I am idiot.... the pw push gateway container had the same service name as the main/internal container. traefik was routing every-second request destined to main container to the public one....

[pglombardo]

I've done similar many times :-) Glad to hear everything is resolved!