crafty-controller: bump image 4.4.8->4.10.7 (security CVEs + Java); publish Java port range 25565-25575; app-page port/connection guidance

templates/crafty-controller/docker-compose.yml

@@ -17,7 +17,7 @@
 
 services:
   crafty-controller:
-    image: registry.gitlab.com/crafty-controller/crafty-4:4.4.8
+    image: registry.gitlab.com/crafty-controller/crafty-4:4.10.7
     container_name: crafty-controller
     restart: unless-stopped
     environment:
@@ -38,6 +38,12 @@ services:
       - crafty_servers:/crafty/servers
       - crafty_config:/crafty/app/config
       - crafty_import:/crafty/import
+    # Publish the Minecraft Java game-port range (TCP) from the container to the guest so players can
+    # connect to the game servers. The web UI (8443) stays behind Traefik via the labels below — do NOT
+    # use network_mode: host (it would break that label routing). 11 ports = up to 11 Java servers; the
+    # first server uses 25565, the rest 25566–25575. Bedrock (UDP 19132) is intentionally out of scope.
+    ports:
+      - "25565-25575:25565-25575"
     networks:
       - traefik-public
     deploy: