feat: expose terminal server on terminal.coolify.dev.pivoine.art

- Add Traefik labels to expose terminal server publicly
- Configure terminal server on terminal.coolify.dev.pivoine.art
- Update Coolify app to use public terminal hostname
- Change TERMINAL_HOST to terminal.coolify.dev.pivoine.art
- Change TERMINAL_PORT to 443 for HTTPS WebSocket connections

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

dev/compose.yaml

@@ -127,8 +127,8 @@ services:
       - PUSHER_APP_KEY=${DEV_COOLIFY_PUSHER_APP_KEY}
       - PUSHER_APP_SECRET=${DEV_COOLIFY_PUSHER_APP_SECRET}
       - PUSHER_SCHEME=https
-      - TERMINAL_HOST=${DEV_COMPOSE_PROJECT_NAME}_coolify_terminal
-      - TERMINAL_PORT=6002
+      - TERMINAL_HOST=terminal.${DEV_COOLIFY_TRAEFIK_HOST}
+      - TERMINAL_PORT=443
       - SSL_MODE=off
     networks:
       - compose_network
@@ -184,7 +184,7 @@ services:
       # Watchtower
       - "com.centurylinklabs.watchtower.enable=${WATCHTOWER_LABEL_ENABLE}"
 
-  # Coolify Terminal (WebSocket server on port 6002 - internal only, no Traefik routing)
+  # Coolify Terminal (WebSocket server on port 6002)
   coolify_terminal:
     image: ${DEV_COOLIFY_REALTIME_IMAGE:-ghcr.io/coollabsio/coolify-realtime:1.0.10}
     container_name: ${DEV_COMPOSE_PROJECT_NAME}_coolify_terminal
@@ -200,6 +200,20 @@ services:
       retries: 10
     networks:
       - compose_network
+    labels:
+      - "traefik.enable=${DEV_TRAEFIK_ENABLED}"
+      # HTTP router
+      - "traefik.http.routers.${DEV_COMPOSE_PROJECT_NAME}-terminal-web.rule=Host(`terminal.${DEV_COOLIFY_TRAEFIK_HOST}`)"
+      - "traefik.http.routers.${DEV_COMPOSE_PROJECT_NAME}-terminal-web.entrypoints=web"
+      # HTTPS router
+      - "traefik.http.routers.${DEV_COMPOSE_PROJECT_NAME}-terminal-web-secure.rule=Host(`terminal.${DEV_COOLIFY_TRAEFIK_HOST}`)"
+      - "traefik.http.routers.${DEV_COMPOSE_PROJECT_NAME}-terminal-web-secure.tls.certresolver=resolver"
+      - "traefik.http.routers.${DEV_COMPOSE_PROJECT_NAME}-terminal-web-secure.entrypoints=web-secure"
+      # Service
+      - "traefik.http.services.${DEV_COMPOSE_PROJECT_NAME}-terminal-web-secure.loadbalancer.server.port=6002"
+      - "traefik.docker.network=${NETWORK_NAME}"
+      # Watchtower
+      - "com.centurylinklabs.watchtower.enable=${WATCHTOWER_LABEL_ENABLE}"
 
   # n8n - Workflow automation platform
   n8n: