Artifacts

# Traefik dynamic configuration for HQ01.
#
# HQ01 runs directly on the host (systemd / background process) on port 4000,
# not in a container — so spawned Claude sessions run on the host and the app can
# write to /srv/aaf. Traefik reaches it via host.docker.internal (host-gateway).
#
# This replaces the routing that previously lived on the hq01 container's labels.
http:
  routers:
    hq01:
      rule: "Host(`hq.agentsaf.com`)"
      entryPoints:
        - websecure
      service: hq01
      tls:
        certResolver: letsencrypt

    hq01-http:
      rule: "Host(`hq.agentsaf.com`)"
      entryPoints:
        - web
      service: hq01
      middlewares:
        - hq01-redirect

  services:
    hq01:
      loadBalancer:
        servers:
          - url: "http://host.docker.internal:4000"

  middlewares:
    hq01-redirect:
      redirectScheme:
        scheme: https