services:
  password-generator:
    image: gitea.scu.si/florianwalther/password-generator:latest
    container_name: password-generator
    restart: always
    expose:
      - "8080:8080"
    # Falls die Registry privat ist, muss der Host zuvor mit 
    # 'docker login gitea.scu.si' angemeldet worden sein.
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=traefik_backend"
      - "traefik.http.routers.webpass.rule=Host(`passwd.scu.si`)"
      - "traefik.http.routers.webpass.entrypoints=web,websecure"
      - "traefik.http.routers.webpass.tls=true"
      - "traefik.http.routers.webpass.tls.certresolver=myresolver"
      - "traefik.http.services.webpass.loadbalancer.server.port=8080"
    networks:
      - traefik_backend

networks:
  traefik_backend:
    external: true