services:
  betterbahn:
    image: betterbahn:latest
    build:
      context: ./src
      dockerfile: Dockerfile
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.betterbahn.entrypoints=websecure"
      - "traefik.http.routers.betterbahn.rule=Host(`${PUBLIC_DOMAIN}`)"
      - "traefik.http.routers.betterbahn.tls=true"
      - "traefik.http.routers.betterbahn.tls.certresolver=hetzner"
      - "traefik.http.routers.betterbahn.tls.domains[0].main=${TLS_DOMAIN}"
      - "traefik.http.routers.betterbahn.middlewares=secHeaders@file, autodetectContenttype@file, authentikProd@file"
      - "traefik.http.services.betterbahn.loadbalancer.server.port=3000" # set port the container listenes to
      - "traefik.http.services.betterbahn.loadbalancer.server.scheme=http"