From f41d423936d812e2f74cebe3af38e2e59ca064ee Mon Sep 17 00:00:00 2001
From: Kevin Bataille <kevin@kev1.net>
Date: Sun, 15 Feb 2026 18:21:04 +0400
Subject: [PATCH] Try production configuration

---
 Caddyfile                   |  2 +-
 docker-compose.override.yml | 44 +++++++++++++++++++++++++++++++++++++
 generate_config.sh          |  0
 3 files changed, 45 insertions(+), 1 deletion(-)
 create mode 100644 docker-compose.override.yml
 mode change 100644 => 100755 generate_config.sh

diff --git a/Caddyfile b/Caddyfile
index b14a88d..fe41d41 100644
--- a/Caddyfile
+++ b/Caddyfile
@@ -1,4 +1,4 @@
-{$HOSTNAME} {
+http://{$HOSTNAME} {
 	route /api* {
 		uri strip_prefix /api
 		reverse_proxy http://api:14702 {
diff --git a/docker-compose.override.yml b/docker-compose.override.yml
new file mode 100644
index 0000000..95db904
--- /dev/null
+++ b/docker-compose.override.yml
@@ -0,0 +1,44 @@
+name: stoat
+
+networks:
+  web:
+    external: true
+    name: web
+
+services:
+  # Caddy: Web server
+  caddy:
+    image: docker.io/caddy
+    restart: unless-stopped
+    env_file: .env.web
+    volumes:
+      - ./Caddyfile:/etc/caddy/Caddyfile
+      - ./data/caddy-data:/data
+      - ./data/caddy-config:/config
+    labels:
+      # Explicitly tell Traefik to expose this container
+      - traefik.enable=true
+      - traefik.docker.network=web
+      # HTTPS
+      - traefik.http.services.stoat-service-secure.loadbalancer.server.port=80
+      - traefik.http.routers.stoat-secure.service=stoat-service-secure
+      - traefik.http.routers.stoat-secure.entrypoints=websecure
+      - traefik.http.routers.stoat-secure.tls.certresolver=le
+      - traefik.http.routers.stoat-secure.rule=Host(`stoat.mistergeek.fr`)
+      # - traefik.http.routers.stoat-secure.rule=Host(`stoat.stoat.net`)
+      - traefik.http.middlewares.stoat-secure-cache.compress=true
+      # HTTP
+      - traefik.http.services.stoat-service-insecure.loadbalancer.server.port=80
+      - traefik.http.routers.stoat-insecure.service=stoat-service-insecure
+      - traefik.http.routers.stoat-insecure.entrypoints=web
+      - traefik.http.routers.stoat-insecure.rule=Host(stoat.mistergeek.fr)
+      # - traefik.http.routers.stoat-insecure.rule=Host(`stoat.stoat.net`)
+      - traefik.http.middlewares.stoat-insecure-cache.compress=true
+      - traefik.http.routers.traefik.tls=true
+      - traefik.http.routers.traefik.tls.certresolver=le
+      # GZIP
+      - traefik.http.routers.traefik.middlewares=traefik-compress
+      - traefik.http.middlewares.traefik-compress.compress=true
+    networks:
+      - web
+
diff --git a/generate_config.sh b/generate_config.sh
old mode 100644
new mode 100755