services:
  opencloud:
    restart: unless-stopped
    image: opencloudeu/opencloud-rolling:latest
    container_name: opencloud
    environment:
      # KRIITILINE: Traefik termineerib TLS, sisemiselt HTTP
      - PROXY_TLS=false
      - OC_INSECURE=true
      - PROXY_HTTP_ADDR=0.0.0.0:9200
      - OC_URL=https://opencloud.odamus.com
    volumes:
      - /srv/opencloud/opencloud-config:/etc/opencloud
      - /srv/opencloud/opencloud-data:/var/lib/opencloud
      - /etc/localtime:/etc/localtime
#    ports:
#      - 9200:9200
    networks:
      - traefik-external
      - db-external
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=traefik-external"
      - "traefik.constraint-label=traefik-external"
      
      # HTTP → HTTPS redirect
      - "traefik.http.routers.opencloud-http.rule=Host(`opencloud.odamus.com`)"
      - "traefik.http.routers.opencloud-http.entrypoints=web"
      - "traefik.http.routers.opencloud-http.middlewares=http-to-https"
      
      # HTTPS (Traefik termineerib TLS)
      - "traefik.http.routers.opencloud-https.rule=Host(`opencloud.odamus.com`)"
      - "traefik.http.routers.opencloud-https.entrypoints=websecure"
      - "traefik.http.routers.opencloud-https.tls.certresolver=mychallenge"
      
      # Sisemiselt HTTP portal 9200
      - "traefik.http.services.opencloud.loadbalancer.server.port=9200"
      # Traefik ei ümberkrüpteeri sisemiselt
      #- "traefik.http.services.opencloud.loadbalancer.serversTransport=opencloud-transport"


networks:
  traefik-external:
    external: true
  db-external:
    external: true