services:
  betterbahn:
    image: betterbahn:latest
    build:
      context: ./src
      dockerfile: Dockerfile
    networks:
      - dokploy-network
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=dokploy-network"

      - "traefik.http.services.betterbahn-app.loadbalancer.server.port=3000" # set port the container listenes to
      - "traefik.http.services.betterbahn-app.loadbalancer.server.scheme=http"

      - "traefik.http.routers.betterbahn-app-web.rule=Host(`${PUBLIC_DOMAIN}`)"
      - "traefik.http.routers.betterbahn-app-web.service=betterbahn-app"
      - "traefik.http.routers.betterbahn-app-web.entrypoints=web"
      - "traefik.http.routers.betterbahn-app-web.middlewares=redirect-to-https@file"

      - "traefik.http.routers.betterbahn-app-websecure.entrypoints=websecure"
      - "traefik.http.routers.betterbahn-app-websecure.service=betterbahn-app"
      - "traefik.http.routers.betterbahn-app-websecure.rule=Host(`${PUBLIC_DOMAIN}`)"
      - "traefik.http.routers.betterbahn-app-websecure.tls=true"
      - "traefik.http.routers.betterbahn-app-websecure.tls.certresolver=hetzner"
      - "traefik.http.routers.betterbahn-app-websecure.tls.domains[0].main=${TLS_DOMAIN}"
      - "traefik.http.routers.betterbahn-app-websecure.middlewares=secHeaders@file, autodetectContenttype@file, authentikProd@file"

networks:
  dokploy-network:
    external: true