http:
  routers:
    n8n-https:
      rule: "Host(`n8n.m5digital.net.br`)"
      entryPoints:
        - websecure
      service: n8n
      tls:
        certResolver: letsencrypt

    openwa-https:
      rule: "Host(`wa.m5digital.net.br`)"
      entryPoints:
        - websecure
      service: openwa
      middlewares:
        - openwa-headers
      tls:
        certResolver: letsencrypt

    saleor-https:
      rule: "Host(`loja.m5digital.net.br`)"
      entryPoints:
        - websecure
      service: saleor
      tls:
        certResolver: letsencrypt

    saleor-dashboard-https:
      rule: "Host(`dashboard.m5digital.net.br`)"
      entryPoints:
        - websecure
      service: saleor-dashboard
      tls:
        certResolver: letsencrypt

    gitea-https:
      rule: "Host(`git.m5digital.net.br`)"
      entryPoints:
        - websecure
      service: gitea
      tls:
        certResolver: letsencrypt

    video-https:
      rule: "Host(`video.m5digital.net.br`)"
      entryPoints:
        - websecure
      service: video
      tls:
        certResolver: letsencrypt


    painel-https:
      rule: "Host(`painel.m5digital.net.br`)"
      entryPoints:
        - websecure
      service: painel
      tls:
        certResolver: letsencrypt

    painel-http:
      rule: "Host(`painel.m5digital.net.br`)"
      entryPoints:
        - web
      service: painel
      middlewares:
        - redirect-to-https

    crm-https:
      rule: "Host(`crm.m5digital.net.br`)"
      entryPoints:
        - websecure
      service: twenty-crm
      tls:
        certResolver: letsencrypt

    crm-app-https:
      rule: "Host(`app.crm.m5digital.net.br`)"
      entryPoints:
        - websecure
      service: twenty-crm
      tls:
        certResolver: letsencrypt

    crm-m5online-https:
      rule: "Host(`m5online.crm.m5digital.net.br`)"
      entryPoints:
        - websecure
      service: twenty-crm
      tls:
        certResolver: letsencrypt

    crm-medalpha-https:
      rule: "Host(`medalpha.crm.m5digital.net.br`)"
      entryPoints:
        - websecure
      service: twenty-crm
      tls:
        certResolver: letsencrypt

    chatwoot-https:
      rule: "Host(`chat.m5digital.net.br`)"
      entryPoints:
        - websecure
      service: chatwoot
      tls:
        certResolver: letsencrypt

    omniroute-https:
      rule: "Host(`gateway.m5digital.net.br`)"
      entryPoints:
        - websecure
      service: omniroute
      tls:
        certResolver: letsencrypt

    n8n-http:
      rule: "PathPrefix(`/n8n`)"
      entryPoints:
        - web
      service: n8n
      middlewares:
        - n8n-strip

    openwa-http:
      rule: "PathPrefix(`/wa`)"
      entryPoints:
        - web
      service: openwa
      middlewares:
        - openwa-strip

    gitea-http:
      rule: "PathPrefix(`/git`)"
      entryPoints:
        - web
      service: gitea
      middlewares:
        - gitea-strip

    saleor-http:
      rule: "PathPrefix(`/loja`)"
      entryPoints:
        - web
      service: saleor
      middlewares:
        - saleor-strip

    saleor-dashboard-http:
      rule: "PathPrefix(`/dashboard`)"
      entryPoints:
        - web
      service: saleor-dashboard
      middlewares:
        - saleor-dash-strip

    chatwoot-http:
      rule: "Host(`chat.m5digital.net.br`)"
      entryPoints:
        - web
      service: chatwoot
      middlewares:
        - chatwoot-redirect

  middlewares:
    n8n-strip:
      stripPrefix:
        prefixes:
          - /n8n
    openwa-strip:
      stripPrefix:
        prefixes:
          - /wa
    openwa-headers:
      headers:
        customRequestHeaders:
          X-Forwarded-Proto: "https"
        customResponseHeaders:
          X-Frame-Options: "SAMEORIGIN"
    gitea-strip:
      stripPrefix:
        prefixes:
          - /git
    saleor-strip:
      stripPrefix:
        prefixes:
          - /loja
    saleor-dash-strip:
      stripPrefix:
        prefixes:
          - /dashboard
    chatwoot-redirect:
      redirectScheme:
        scheme: https
    redirect-to-https:
      redirectScheme:
        scheme: https

  services:
    n8n:
      loadBalancer:
        servers:
          - url: "http://m5_n8n:5678"
    openwa:
      loadBalancer:
        servers:
          - url: "http://m5_openwa:2785"
    saleor:
      loadBalancer:
        servers:
          - url: "http://m5_saleor:8000"
    saleor-dashboard:
      loadBalancer:
        servers:
          - url: "http://m5_saleor_dashboard:80"
    gitea:
      loadBalancer:
        servers:
          - url: "http://m5_gitea:3000"
    video:
      loadBalancer:
        servers:
          - url: "http://172.18.0.11:8091"
    twenty-crm:
      loadBalancer:
        servers:
          - url: "http://twenty_front:3000"
    chatwoot:
      loadBalancer:
        servers:
          - url: "http://chatwoot:3000"

    painel:
      loadBalancer:
        servers:
          - url: "http://172.18.0.1:5173"
    omniroute:
      loadBalancer:
        servers:
          - url: "http://omniroute:20128"
    acme-webroot:
      loadBalancer:
        servers:
          - url: "http://127.0.0.1:8880"

tls:
  stores:
    default:
      defaultCertificate:
        certFile: /certs/live/video.m5digital.net.br/fullchain.pem
        keyFile: /certs/live/video.m5digital.net.br/privkey.pem