services:
  cal-funnel:
    image: git.beging.de/troogs/cal-funnel:latest
    restart: unless-stopped
    env_file:
      - .env
    networks:
      - proxy
    labels:
      - traefik.enable=true
      - traefik.docker.network=proxy

      # HTTPS router
      - traefik.http.routers.cal-funnel.rule=Host(`${TRAEFIK_HOST}`)
      - traefik.http.routers.cal-funnel.entrypoints=websecure
      - traefik.http.routers.cal-funnel.tls=true
      - traefik.http.routers.cal-funnel.tls.certresolver=${TRAEFIK_CERT_RESOLVER}

      # HTTP -> HTTPS redirect
      - traefik.http.routers.cal-funnel-http.rule=Host(`${TRAEFIK_HOST}`)
      - traefik.http.routers.cal-funnel-http.entrypoints=web
      - traefik.http.routers.cal-funnel-http.middlewares=cal-funnel-redirect
      - traefik.http.middlewares.cal-funnel-redirect.redirectscheme.scheme=https
      - traefik.http.middlewares.cal-funnel-redirect.redirectscheme.permanent=true

      # Backend
      - traefik.http.services.cal-funnel.loadbalancer.server.port=${PORT:-8080}

networks:
  proxy:
    external: true