# APESS 2026 — Traefik dynamic config (file provider)
# Lives at /home/redclaw/projects/clawbooks/deploy/traefik/dynamic/apess.yml on gw-03.
# Cert: /etc/traefik/ssl/apess/apess.{pem,key} (Cloudflare Origin Cert *.redclaw.dev)
# Service backend: apess-web container on clawbooks-net (port 80)
http:
  routers:
    apess-web:
      rule: "Host(`apess.redclaw.dev`)"
      entryPoints:
        - websecure
      service: apess-web
      tls: {}
      priority: 1000

  services:
    apess-web:
      loadBalancer:
        servers:
          - url: "http://apess-web:80"

tls:
  certificates:
    - certFile: /etc/traefik/ssl/apess/apess.pem
      keyFile: /etc/traefik/ssl/apess/apess.key