services:
  auto2026_web:
    image: nginx:alpine
    container_name: auto2026_nginx
    restart: unless-stopped

    volumes:
      - ./html:/usr/share/nginx/html:ro

    networks:
      - web

    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=web"
      - "traefik.http.routers.auto2026.tls.certresolver=letsencrypt"

      - "traefik.http.routers.auto2026.rule=Host(`auto2026.neidel.eu`)"
      - "traefik.http.routers.auto2026.entrypoints=websecure"
      - "traefik.http.routers.auto2026.tls=true"

      - "traefik.http.services.auto2026.loadbalancer.server.port=80"

      # optionale Security-Header
      - "traefik.http.middlewares.auto2026-headers.headers.browserXssFilter=true"
      - "traefik.http.middlewares.auto2026-headers.headers.contentTypeNosniff=true"
      - "traefik.http.middlewares.auto2026-headers.headers.referrerPolicy=no-referrer"
      - "traefik.http.routers.auto2026.middlewares=auto2026-headers@docker"

networks:
  web:
    external: true