From 847e99cd514ee92012df98e038fb078f447cd8eb Mon Sep 17 00:00:00 2001
From: Jonathan Sykes <telemagnadon@gmail.com>
Date: Tue, 30 Jun 2026 07:13:25 +0800
Subject: [PATCH] feat: add Traefik labels for worship.hesed.sbs via homelab
 Dokploy
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- Join dokploy-network so homelab Traefik can discover the container
- Remove host port binding (Traefik routes directly via service discovery)
- Add HTTP→HTTPS redirect and HTTPS router with letsencrypt cert
- VPS Traefik passthrough for worship.hesed.sbs already added on server
---
 docker-compose.yml | 17 +++++++++++++++--
 1 file changed, 15 insertions(+), 2 deletions(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index e00ee2a..1607760 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -2,8 +2,6 @@ services:
   ytplayer:
     build: .
     restart: unless-stopped
-    ports:
-      - "${PORT:-3000}:3000"
     volumes:
       # libsql DB file persists across container rebuilds
       - ytplayer-data:/app/data
@@ -19,7 +17,22 @@ services:
       timeout: 5s
       retries: 3
       start_period: 15s
+    networks:
+      - dokploy-network
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.ytplayer-http.rule=Host(`worship.hesed.sbs`)"
+      - "traefik.http.routers.ytplayer-http.entrypoints=web"
+      - "traefik.http.routers.ytplayer-http.middlewares=redirect-to-https"
+      - "traefik.http.routers.ytplayer-https.rule=Host(`worship.hesed.sbs`)"
+      - "traefik.http.routers.ytplayer-https.entrypoints=websecure"
+      - "traefik.http.routers.ytplayer-https.tls.certresolver=letsencrypt"
+      - "traefik.http.services.ytplayer-svc.loadbalancer.server.port=3000"
 
 volumes:
   ytplayer-data:
     driver: local
+
+networks:
+  dokploy-network:
+    external: true