docker-compose.override.yml

services:

  proxy:
    image: traefik:v3.7.5
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    ports:
      - "80:80"
      - "8090:8080"
    # Duplicate the command from docker-compose.yml to add --api.insecure=true
    command:
      # Enable Docker in Traefik, so that it reads labels from Docker services
      - --providers.docker
      # Add a constraint to only use services with the label for this stack
      - --providers.docker.constraints=Label(`traefik.constraint-label`, `traefik-public`)
      # Do not expose all Docker services, only the ones explicitly exposed
      - --providers.docker.exposedbydefault=false
      # Create an entrypoint "http" listening on port 80
      - --entrypoints.http.address=:80
      # Create an entrypoint "https" listening on port 443
      - --entrypoints.https.address=:443
      # Enable the access log, with HTTP requests
      - --accesslog
      # Enable the Traefik log, for configurations and errors
      - --log
      # Enable debug logging for local development
      - --log.level=DEBUG
      # Enable the Dashboard and API
      - --api
      # Enable the Dashboard and API in insecure mode for local development
      - --api.insecure=true
    labels:
      # Enable Traefik for this service, to make it available in the public network
      - traefik.enable=true
      - traefik.constraint-label=traefik-public
      # Dummy https-redirect middleware that doesn't really redirect, only to
      # allow running it locally
      - traefik.http.middlewares.https-redirect.contenttype.autodetect=false
    networks:
      - traefik-public
      - default

  db:
    restart: "no"
    ports:
      - "5432:5432"


  backend:
    restart: "no"
    ports:
      - "8888:8888"
    environment:
      SMTP_HOST: "mailcatcher"
      SMTP_PORT: "1025"
      SMTP_TLS: "false"
      EMAILS_FROM_EMAIL: "noreply@example.com"

  mailcatcher:
    image: schickling/mailcatcher
    ports:
      - "1080:1080"
      - "1025:1025"

  frontend:
    restart: "no"
    env_file:
      - .env

  # Local-only container log viewer (http://localhost:9999). Reads the Docker
  # socket read-only to tail logs of all services, including the workers.
  dozzle:
    image: amir20/dozzle:latest
    restart: "no"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
    # Bind to localhost by default so logs are never exposed on a LAN. Set
    # DOZZLE_BIND_HOST=0.0.0.0 if your setup cannot reach it via localhost
    # (e.g. some native-docker WSL configs).
    ports:
      - "${DOZZLE_BIND_HOST:-127.0.0.1}:9999:8080"

networks:
  traefik-public:
    # For local dev, don't expect an external Traefik network
    external: false