services:
  webapp:
    build:
      context: .
      dockerfile: Dockerfile
    container_name: webapp
    restart: unless-stopped
    networks:
      - webnet
    labels:
      - "traefik.enable=true"

      # Main site: duooomi.com
      - "traefik.http.routers.webapp.rule=Host(`duooomi.com`)"
      - "traefik.http.routers.webapp.entrypoints=websecure"
      - "traefik.http.routers.webapp.tls=true"
      - "traefik.http.routers.webapp.tls.certresolver=myresolver"
      - "traefik.http.services.webapp.loadbalancer.server.port=5173"

      # Redirect www.duooomi.com -> duooomi.com
      - "traefik.http.routers.webapp-www.rule=Host(`www.duooomi.com`)"
      - "traefik.http.routers.webapp-www.entrypoints=websecure"
      - "traefik.http.routers.webapp-www.tls=true"
      - "traefik.http.routers.webapp-www.tls.certresolver=myresolver"
      - "traefik.http.routers.webapp-www.middlewares=redirect-www-to-apex"
      - "traefik.http.routers.webapp-www.service=webapp"

      - "traefik.http.middlewares.redirect-www-to-apex.redirectregex.regex=^https://www\\.duooomi\\.com/?(.*)"
      - "traefik.http.middlewares.redirect-www-to-apex.redirectregex.replacement=https://duooomi.com/$${1}"
      - "traefik.http.middlewares.redirect-www-to-apex.redirectregex.permanent=true"
    expose:
      - "5173"

  traefik:
    image: ghcr.io/traefik/traefik:v3.3
    container_name: traefik
    restart: unless-stopped
    command:
      - "--api.insecure=true"
      - "--providers.docker=true"
      - "--providers.docker.exposedbydefault=false"

      # Entrypoints
      - "--entrypoints.web.address=:80"
      - "--entrypoints.web.http.redirections.entrypoint.to=websecure"
      - "--entrypoints.web.http.redirections.entrypoint.scheme=https"
      - "--entrypoints.web.http.redirections.entrypoint.permanent=true"
      - "--entrypoints.websecure.address=:443"

      # Let's Encrypt
      - "--certificatesresolvers.myresolver.acme.httpchallenge=true"
      - "--certificatesresolvers.myresolver.acme.httpchallenge.entrypoint=web"
      - "--certificatesresolvers.myresolver.acme.email=admin@duooomi.com"
      - "--certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json"
    ports:
      - "80:80"
      - "443:443"
      - "8080:8080"
    volumes:
      - "/var/run/docker.sock:/var/run/docker.sock:ro"
      - "./letsencrypt:/letsencrypt"
    networks:
      - webnet

networks:
  webnet:
    driver: bridge

volumes:
  letsencrypt: