---
services:
  server:
    environment:
      B23_ALLOW_UP: "true"
    networks:
      - backend
      - web
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.sso.entrypoints=websecure"
      - "traefik.http.routers.sso.rule=Host(`${PUBLIC_DOMAIN}`)" # change hostname!
      - "traefik.http.routers.sso.tls=true"
      - "traefik.http.routers.sso.tls.certresolver=pdns"
      - "traefik.http.routers.sso.tls.domains[0].main=*.test.base23.de"
      - "traefik.http.routers.sso.middlewares=secHeaders@file,hsts-header@file"
      - "traefik.http.services.sso.loadbalancer.server.port=9443" # set port the container listenes to
      - "traefik.http.services.sso.loadbalancer.server.scheme=https"

networks:
  web:
    external: true