version: '3.8'

services:
  robbis-space:
    build:
      context: ./kirby
      dockerfile: Dockerfile
    image: robbis-space
    container_name: robbis-space
    volumes:
      - /home/kirbyuser/robbis-space:/var/www/html:rw # Persistente Daten
    environment:
      - DEPLOY_SECRET=${DEPLOY_SECRET}
    restart: unless-stopped
    networks:
      - proxy
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=proxy"
      - "traefik.http.routers.robbis-space.service=robbis-space"
      - "traefik.http.routers.robbis-space.tls.certresolver=http_resolver"
      - "traefik.http.routers.robbis-space.tls.domains[0].main=robbis.space"
      - "traefik.http.routers.robbis-space.rule=Host(`robbis.space`)"
      - "traefik.http.routers.robbis-space.entrypoints=websecure"
      - "traefik.http.routers.robbis-space.tls=true"
      - "traefik.http.services.robbis-space.loadbalancer.server.port=80"
          # HTTP-Router (Port 80)
      - "traefik.http.routers.robbis-space-http.rule=Host(`robbis.space`)"
      - "traefik.http.routers.robbis-space-http.entrypoints=web"
      - "traefik.http.routers.robbis-space-http.middlewares=traefik-https-redirect"
      - "traefik.http.middlewares.traefik-https-redirect.redirectscheme.scheme=https"
          # Service-Port (nginx läuft auf Port 80 im Container)
networks:
  proxy:
    external: true