services:
  web:
    build: .
    restart: unless-stopped
    labels:
      - "traefik.enable=${TRAEFIK_ENABLED:-false}"
      - "traefik.http.middlewares.vpinball-redirect-web-secure.redirectscheme.scheme=https"
      - "traefik.http.routers.vpinball-web.middlewares=vpinball-redirect-web-secure"
      - "traefik.http.routers.vpinball-web.rule=Host(`${TRAEFIK_HOST}`)"
      - "traefik.http.routers.vpinball-web.entrypoints=web"
      - "traefik.http.routers.vpinball-web-secure.rule=Host(`${TRAEFIK_HOST}`)"
      - "traefik.http.routers.vpinball-web-secure.tls.certresolver=resolver"
      - "traefik.http.routers.vpinball-web-secure.entrypoints=web-secure"
      - "traefik.http.routers.vpinball-web-secure.middlewares=security-headers@file"
      - "traefik.http.services.vpinball-web-secure.loadbalancer.server.port=80"
      - "traefik.docker.network=${NETWORK_NAME}"
    networks:
      - compose_network

networks:
  compose_network:
    name: ${NETWORK_NAME}
    external: true