fix: pgAdmin nur intern erreichbar (kein öffentlicher Traefik-Zugang)

Zugriff nur noch per SSH-Tunnel, nicht mehr über stwwetter.fuerst-stuttgart.de/pgadmin

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

docker-compose.prod.yml

@@ -92,6 +92,23 @@ services:
       - "traefik.http.routers.wetterstation.tls.certresolver=letsencrypt"
       - "traefik.http.services.wetterstation.loadbalancer.server.port=80"
 
+  pgadmin:
+    image: dpage/pgadmin4:latest
+    container_name: wetterstation_pgadmin_prod
+    restart: unless-stopped
+    environment:
+      PGADMIN_DEFAULT_EMAIL: ${PGADMIN_EMAIL}
+      PGADMIN_DEFAULT_PASSWORD: ${PGADMIN_PASSWORD}
+      PGADMIN_CONFIG_SERVER_MODE: 'True'
+    volumes:
+      - pgadmin_data:/var/lib/pgadmin
+    depends_on:
+      - postgres
+    networks:
+      - internal
+    labels:
+      - "traefik.enable=false"
+
   monitor:
     image: docker.citysensor.de/wetterstation-monitor:latest
     container_name: wetterstation_monitor_prod
@@ -102,6 +119,8 @@ services:
 volumes:
   postgres_data:
     name: wetterstation_postgres_data_prod
+  pgadmin_data:
+    name: wetterstation_pgadmin_data_prod
 
 networks:
   internal: