From 9b4b6f309869a9e2d367613317e1ef83299decaa Mon Sep 17 00:00:00 2001
From: Matt Speer <mwspeer@gmail.com>
Date: Sat, 10 Oct 2026 11:15:56 -0500
Subject: [PATCH] added traefik labels and network

---
 docker-compose.yml | 15 ++++++++++++++-
 1 file changed, 14 insertions(+), 1 deletion(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 8357c9a..7c2e7cc 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,6 +1,16 @@
 services:
   actual_server:
     image: docker.io/actualbudget/actual-server:latest
+    networks:
+      - traefik-public
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.actual.rule=Host(`finance.speerfam.net`)"
+      - "traefik.http.routers.actual.entrypoints=websecure"
+      - "traefik.http.routers.actual.tls.certresolver=myresolver"
+      # Pulling the security rules dynamically from our file provider setup
+      - "traefik.http.routers.actual.middlewares=geoblock-policy@file,crowdsec-policy@file,secure-headers@file"
+      - "traefik.http.services.actual.loadbalancer.server.port=5006"
     ports:
       - '5006:5006'
     environment:
@@ -24,4 +34,7 @@ services:
       timeout: 10s
       retries: 3
       start_period: 20s
-    restart: unless-stopped
\ No newline at end of file
+    restart: unless-stopped
+networks:
+    traefik-public:
+        external: true
\ No newline at end of file