services:
  app:
    build:
      context: .
      args:
        NEXT_PUBLIC_SUPABASE_URL: ${SUPABASE_URL}
        NEXT_PUBLIC_SUPABASE_ANON_KEY: ${SUPABASE_ANON_KEY}
    restart: unless-stopped
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.tribunal.rule=Host(`${APP_DOMAIN}`)"
      - "traefik.http.routers.tribunal.entrypoints=https"
      - "traefik.http.routers.tribunal.tls.certresolver=letsencrypt"
      - "traefik.http.routers.tribunal.middlewares=compression@file,hsts-headers@file"
      - "traefik.http.services.tribunal.loadbalancer.server.port=3000"
    networks:
      - proxy

networks:
  proxy:
    external: true
    name: ${TRAEFIK_NETWORK}