# fl.narl.io behind Traefik on the external "narl" network. TLS ends at Traefik;
# the container itself is not published on any host port.
services:
  web:
    build:
      args:
        SITE_URL: https://fl.narl.io
    ports: !reset []
    networks:
      - narl
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=narl"
      - "traefik.http.routers.bass-foundry-website.rule=Host(`fl.narl.io`)"
      - "traefik.http.routers.bass-foundry-website.entrypoints=websecure"
      - "traefik.http.routers.bass-foundry-website.tls.certresolver=https_resolver"
      - "traefik.http.services.bass-foundry-website.loadbalancer.server.port=8080"

networks:
  narl:
    external: true