services:
    postfixadmin:
        image: git.mifi.dev/mifi-holdings/mail-postfixadmin:latest
        container_name: mifi-mail-postfixadmin
        # ENV: set PFA_* in Portainer stack → ENV (advanced); paste from .env or .env.example
        healthcheck:
            test: curl --fail http://localhost || exit 1
            retries: 5
            start_period: 30s
        restart: unless-stopped
        networks:
            - traefik
        volumes:
            - /var/run/mysqld/mysqld.sock:/var/run/mysqld/mysqld.sock:ro
        labels:
            - 'traefik.enable=true'
            - 'traefik.docker.network=traefik'
            - 'traefik.http.routers.postfixadmin.rule=Host(`postmaster.mifi.holdings`)'
            - 'traefik.http.routers.postfixadmin.middlewares=gzip@file,security-medium@file'
            - 'traefik.http.routers.postfixadmin.entrypoints=websecure'
            - 'traefik.http.routers.postfixadmin.tls=true'
            - 'traefik.http.routers.postfixadmin.tls.certresolver=letsencrypt'

networks:
    traefik:
        external: true