---
version: '3'

services:
  homepage:
    image: codeberg.org/angestoepselt/homepage:${BRANCH:-main}
    container_name: homepage-${BRANCH:-main}
    restart: unless-stopped
    env_file: stack.env
    security_opt:
      - no-new-privileges:true
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=proxy"
      - "traefik.http.routers.homepage-${BRANCH:-main}-secure.rule=Host(`${DOMAIN}`,`www.${DOMAIN}`)"
      - "traefik.http.routers.homepage-${BRANCH:-main}-secure.entrypoints=websecure"
      - "traefik.http.routers.homepage-${BRANCH:-main}-secure.tls.certresolver=letsencrypt"
      - "traefik.http.routers.homepage-${BRANCH:-main}-secure.tls=true"
      - "traefik.http.routers.homepage-${BRANCH:-main}-secure.middlewares=www-redirectregex"
      - "traefik.http.middlewares.www-redirectregex.redirectregex.regex=^https?://www.${DOMAIN}"
      - "traefik.http.middlewares.www-redirectregex.redirectregex.replacement=https://${DOMAIN}"
    networks:
      - proxy

networks:
  proxy:
    external: true