version: "3.3"

services:
  nginx:
    image: webssh
    deploy:
      labels:
        - "traefik.enable=true"
        - "traefik.http.routers.webssh.rule=Host(`webssh.trustai.uk`)"
        - "traefik.http.routers.webssh.entrypoints=web"
        - "traefik.http.services.webssh.loadbalancer.server.port=8888"
        # TLS
        - "traefik.http.routers.websshs.rule=Host(`webssh.trustai.uk`)"
        - "traefik.http.routers.websshs.entrypoints=websecure"
        - "traefik.http.routers.websshs.tls.certresolver=myhttpchallenge"
        # Redirect
        - "traefik.http.routers.webssh.middlewares=https_redirect"
        - "traefik.http.middlewares.https_redirect.redirectscheme.scheme=https"
    networks:
      - traefik-public
networks:
  traefik-public:
    external: true