services:
  techniker-me:
    image: docker.techniker.me/techniker-me:latest
    container_name: techniker-me
    restart: unless-stopped
    networks:
      - services_traefik-public 
  
    labels:
      - traefik.enable=true
      - traefik.http.routers.techniker-me.entrypoints=https
      - traefik.http.routers.techniker-me.rule=Host(`techniker.me`)
      - traefik.http.routers.techniker-me.tls=true
      - traefik.http.routers.techniker-me.tls.certresolver=cloudflare
      - traefik.http.services.techniker-me.loadbalancer.server.port=80
      - traefik.http.middlewares.hls-cors.headers.accesscontrolalloworiginlist=*
      - traefik.http.middlewares.hls-cors.headers.accesscontrolallowmethods=GET,OPTIONS,HEAD
      - traefik.http.middlewares.hls-cors.headers.accesscontrolallowheaders=Content-Type,Range
      - traefik.http.middlewares.hls-cors.headers.accesscontrolexposeheaders=Content-Length,Content-Range
      - traefik.http.middlewares.hls-cors.headers.accesscontrolallowcredentials=false
      - traefik.http.routers.techniker-me.middlewares=hls-cors


networks:
  services_traefik-public:
    external: true