services:
  mta-sts:
    image: git.mifi.dev/mifi-holdings/mta-sts:latest
    container_name: mifi-mail-mta-sts
    healthcheck:
      test: ["CMD", "wget", "--spider", "-q", "http://localhost"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 10s
    networks:
      - traefik
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=traefik"
      # Single backend: all routers use this service
      - "traefik.http.services.mta-sts.loadbalancer.server.port=80"

      # mifi.holdings
      - "traefik.http.routers.mta-sts-mifi-holdings.rule=Host(`mta-sts.mifi.holdings`)"
      - "traefik.http.routers.mta-sts-mifi-holdings.entrypoints=websecure"
      - "traefik.http.routers.mta-sts-mifi-holdings.tls=true"
      - "traefik.http.routers.mta-sts-mifi-holdings.tls.certresolver=letsencrypt"
      - "traefik.http.routers.mta-sts-mifi-holdings.service=mta-sts"

      # mifi.com.br
      - "traefik.http.routers.mta-sts-mifi-com-br.rule=Host(`mta-sts.mifi.com.br`)"
      - "traefik.http.routers.mta-sts-mifi-com-br.entrypoints=websecure"
      - "traefik.http.routers.mta-sts-mifi-com-br.tls=true"
      - "traefik.http.routers.mta-sts-mifi-com-br.tls.certresolver=letsencrypt"
      - "traefik.http.routers.mta-sts-mifi-com-br.service=mta-sts"

      # mifi.dev
      - "traefik.http.routers.mta-sts-mifi-dev.rule=Host(`mta-sts.mifi.dev`)"
      - "traefik.http.routers.mta-sts-mifi-dev.entrypoints=websecure"
      - "traefik.http.routers.mta-sts-mifi-dev.tls=true"
      - "traefik.http.routers.mta-sts-mifi-dev.tls.certresolver=letsencrypt"
      - "traefik.http.routers.mta-sts-mifi-dev.service=mta-sts"

      # mifi.ventures
      - "traefik.http.routers.mta-sts-mifi-ventures.rule=Host(`mta-sts.mifi.ventures`)"
      - "traefik.http.routers.mta-sts-mifi-ventures.entrypoints=websecure"
      - "traefik.http.routers.mta-sts-mifi-ventures.tls=true"
      - "traefik.http.routers.mta-sts-mifi-ventures.tls.certresolver=letsencrypt"
      - "traefik.http.routers.mta-sts-mifi-ventures.service=mta-sts"

      # mifi.vix.br
      - "traefik.http.routers.mta-sts-mifi-vix-br.rule=Host(`mta-sts.mifi.vix.br`)"
      - "traefik.http.routers.mta-sts-mifi-vix-br.entrypoints=websecure"
      - "traefik.http.routers.mta-sts-mifi-vix-br.tls=true"
      - "traefik.http.routers.mta-sts-mifi-vix-br.tls.certresolver=letsencrypt"
      - "traefik.http.routers.mta-sts-mifi-vix-br.service=mta-sts"

      # mifi.me
      - "traefik.http.routers.mta-sts-mifi-me.rule=Host(`mta-sts.mifi.me`)"
      - "traefik.http.routers.mta-sts-mifi-me.entrypoints=websecure"
      - "traefik.http.routers.mta-sts-mifi-me.tls=true"
      - "traefik.http.routers.mta-sts-mifi-me.tls.certresolver=letsencrypt"
      - "traefik.http.routers.mta-sts-mifi-me.service=mta-sts"

      # blackice.vix.br
      - "traefik.http.routers.mta-sts-blackice-vix-br.rule=Host(`mta-sts.blackice.vix.br`)"
      - "traefik.http.routers.mta-sts-blackice-vix-br.entrypoints=websecure"
      - "traefik.http.routers.mta-sts-blackice-vix-br.tls=true"
      - "traefik.http.routers.mta-sts-blackice-vix-br.tls.certresolver=letsencrypt"
      - "traefik.http.routers.mta-sts-blackice-vix-br.service=mta-sts"

      # fitz.guru
      - "traefik.http.routers.mta-sts-fitz-guru.rule=Host(`mta-sts.fitz.guru`)"
      - "traefik.http.routers.mta-sts-fitz-guru.entrypoints=websecure"
      - "traefik.http.routers.mta-sts-fitz-guru.tls=true"
      - "traefik.http.routers.mta-sts-fitz-guru.tls.certresolver=letsencrypt"
      - "traefik.http.routers.mta-sts-fitz-guru.service=mta-sts"

      # umlautpress.com
      - "traefik.http.routers.mta-sts-umlautpress-com.rule=Host(`mta-sts.umlautpress.com`)"
      - "traefik.http.routers.mta-sts-umlautpress-com.entrypoints=websecure"
      - "traefik.http.routers.mta-sts-umlautpress-com.tls=true"
      - "traefik.http.routers.mta-sts-umlautpress-com.tls.certresolver=letsencrypt"
      - "traefik.http.routers.mta-sts-umlautpress-com.service=mta-sts"

      # camilla-rena.com
      - "traefik.http.routers.mta-sts-camilla-rena-com.rule=Host(`mta-sts.camilla-rena.com`)"
      - "traefik.http.routers.mta-sts-camilla-rena-com.entrypoints=websecure"
      - "traefik.http.routers.mta-sts-camilla-rena-com.tls=true"
      - "traefik.http.routers.mta-sts-camilla-rena-com.tls.certresolver=letsencrypt"
      - "traefik.http.routers.mta-sts-camilla-rena-com.service=mta-sts"

      # officelift.net
      - "traefik.http.routers.mta-sts-officelift-net.rule=Host(`mta-sts.officelift.net`)"
      - "traefik.http.routers.mta-sts-officelift-net.entrypoints=websecure"
      - "traefik.http.routers.mta-sts-officelift-net.tls=true"
      - "traefik.http.routers.mta-sts-officelift-net.tls.certresolver=letsencrypt"
      - "traefik.http.routers.mta-sts-officelift-net.service=mta-sts"

      # mylocalpro.biz
      - "traefik.http.routers.mta-sts-mylocalpro-biz.rule=Host(`mta-sts.mylocalpro.biz`)"
      - "traefik.http.routers.mta-sts-mylocalpro-biz.entrypoints=websecure"
      - "traefik.http.routers.mta-sts-mylocalpro-biz.tls=true"
      - "traefik.http.routers.mta-sts-mylocalpro-biz.tls.certresolver=letsencrypt"
      - "traefik.http.routers.mta-sts-mylocalpro-biz.service=mta-sts"

      # mylocalpro.online
      - "traefik.http.routers.mta-sts-mylocalpro-online.rule=Host(`mta-sts.mylocalpro.online`)"
      - "traefik.http.routers.mta-sts-mylocalpro-online.entrypoints=websecure"
      - "traefik.http.routers.mta-sts-mylocalpro-online.tls=true"
      - "traefik.http.routers.mta-sts-mylocalpro-online.tls.certresolver=letsencrypt"
      - "traefik.http.routers.mta-sts-mylocalpro-online.service=mta-sts"

      # happybeardedcarpenter.com
      - "traefik.http.routers.mta-sts-happybeardedcarpenter-com.rule=Host(`mta-sts.happybeardedcarpenter.com`)"
      - "traefik.http.routers.mta-sts-happybeardedcarpenter-com.entrypoints=websecure"
      - "traefik.http.routers.mta-sts-happybeardedcarpenter-com.tls=true"
      - "traefik.http.routers.mta-sts-happybeardedcarpenter-com.tls.certresolver=letsencrypt"
      - "traefik.http.routers.mta-sts-happybeardedcarpenter-com.service=mta-sts"

      # thenewenglandpalletguy.com
      - "traefik.http.routers.mta-sts-thenewenglandpalletguy-com.rule=Host(`mta-sts.thenewenglandpalletguy.com`)"
      - "traefik.http.routers.mta-sts-thenewenglandpalletguy-com.entrypoints=websecure"
      - "traefik.http.routers.mta-sts-thenewenglandpalletguy-com.tls=true"
      - "traefik.http.routers.mta-sts-thenewenglandpalletguy-com.tls.certresolver=letsencrypt"
      - "traefik.http.routers.mta-sts-thenewenglandpalletguy-com.service=mta-sts"

      # dining-it.com
      - "traefik.http.routers.mta-sts-dining-it-com.rule=Host(`mta-sts.dining-it.com`)"
      - "traefik.http.routers.mta-sts-dining-it-com.entrypoints=websecure"
      - "traefik.http.routers.mta-sts-dining-it-com.tls=true"
      - "traefik.http.routers.mta-sts-dining-it-com.tls.certresolver=letsencrypt"
      - "traefik.http.routers.mta-sts-dining-it-com.service=mta-sts"

    restart: unless-stopped

networks:
  traefik:
    external: true