services:
  betterbahn:
    image: ghcr.io/l2xu/betterbahn:latest
    restart: unless-stopped
    networks:
      - dokploy-network
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=dokploy-network"
      - "traefik.http.services.betterbahn-app.loadbalancer.server.port=80" # set port the container listenes to
      - "traefik.http.services.betterbahn-app.loadbalancer.server.scheme=http"
      - "traefik.http.routers.betterbahn-app-web.rule=Host(`${PUBLIC_DOMAIN}`)"
      - "traefik.http.routers.betterbahn-app-web.service=betterbahn-app"
      - "traefik.http.routers.betterbahn-app-web.entrypoints=web"
      - "traefik.http.routers.betterbahn-app-web.middlewares=redirect-to-https@file"
      - "traefik.http.routers.betterbahn-app-websecure.rule=Host(`${PUBLIC_DOMAIN}`)"
      - "traefik.http.routers.betterbahn-app-websecure.service=betterbahn-app"
      - "traefik.http.routers.betterbahn-app-websecure.entrypoints=websecure"
      - "traefik.http.routers.betterbahn-app-websecure.tls=true"
      - "traefik.http.routers.betterbahn-app-websecure.tls.certresolver=hetzner"
      - "traefik.http.routers.betterbahn-app-websecure.tls.domains[0].main=${TLS_DOMAIN}"
      - "traefik.http.middlewares.betterbahn-app-hostheader.headers.customrequestheaders.Host=localhost:3000"
      - "traefik.http.routers.betterbahn-app-websecure.middlewares=secHeaders@file, autodetectContenttype@file, authentikProd@file, betterbahn-app-hostheader"
  # whoami:
  #   image: traefik/whoami
  #   networks:
  #     - dokploy-network
  #   labels:
  #     - "traefik.enable=true"
  #     - "traefik.docker.network=dokploy-network"
  #     - "traefik.http.services.whoami.loadbalancer.server.port=80" # set port the container listenes to
  #     - "traefik.http.services.whoami.loadbalancer.server.scheme=http"
  #     - "traefik.http.routers.whoam-web.rule=Host(`${PUBLIC_DOMAIN}`)"

  #     - "traefik.http.routers.whoam-web.service=whoami"
  #     - "traefik.http.routers.whoam-web.entrypoints=web"
  #     - "traefik.http.routers.whoam-web.middlewares=redirect-to-https@file"
  #     - "traefik.http.routers.whoami-websecure.rule=Host(`${PUBLIC_DOMAIN}`)"

  #     - "traefik.http.routers.whoami-websecure.service=whoami"
  #     - "traefik.http.routers.whoami-websecure.entrypoints=websecure"
  #     - "traefik.http.routers.whoami-websecure.tls=true"
  #     - "traefik.http.routers.whoami-websecure.tls.certresolver=hetzner"
  #     - "traefik.http.routers.whoami-websecure.tls.domains[0].main=${TLS_DOMAIN}"

networks:
  dokploy-network:
    external: true