From a2c787d474e0e2a15f03be721002bc867af3bea3 Mon Sep 17 00:00:00 2001
From: Fusion <noreply@runfusion.ai>
Date: Mon, 18 May 2026 21:16:29 +0200
Subject: [PATCH] fix: add tls=true label to all traefik services

Add explicit traefik.http.routers.*.tls=true label to:
- headquarter-frontend
- headquarter-api

This ensures TLS is explicitly enabled for all routed services.
---
 docker-compose.traefik.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/docker-compose.traefik.yml b/docker-compose.traefik.yml
index 82d51da..8bd2976 100644
--- a/docker-compose.traefik.yml
+++ b/docker-compose.traefik.yml
@@ -61,6 +61,7 @@ services:
       - "traefik.enable=true"
       - "traefik.http.routers.headquarter-frontend.rule=Host(`${WEB_DOMAIN}`)"
       - "traefik.http.routers.headquarter-frontend.entrypoints=websecure"
+      - "traefik.http.routers.headquarter-frontend.tls=true"
       - "traefik.http.routers.headquarter-frontend.tls.certresolver=${TRAEFIK_CERT_RESOLVER:-letsencrypt}"
       - "traefik.http.services.headquarter-frontend.loadbalancer.server.port=80"
 
@@ -104,6 +105,7 @@ services:
       - "traefik.enable=true"
       - "traefik.http.routers.headquarter-api.rule=Host(`${API_DOMAIN}`)"
       - "traefik.http.routers.headquarter-api.entrypoints=websecure"
+      - "traefik.http.routers.headquarter-api.tls=true"
       - "traefik.http.routers.headquarter-api.tls.certresolver=${TRAEFIK_CERT_RESOLVER:-letsencrypt}"
       - "traefik.http.services.headquarter-api.loadbalancer.server.port=8000"