feat: implement CI/CD workflows for Docker image build and deployment

docker-compose.yml

@@ -20,7 +20,21 @@ services:
       - NUXT_PUBLIC_STRIPE_PUBLISHABLE_KEY=${NUXT_PUBLIC_STRIPE_PUBLISHABLE_KEY}
       - STRIPE_SECRET_KEY=${STRIPE_SECRET_KEY}
     restart: unless-stopped
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.slipmatz-web.rule=Host(`${DOMAIN:-slipmatz.com}`)"
+      - "traefik.http.routers.slipmatz-web.entrypoints=websecure"
+      - "traefik.http.routers.slipmatz-web.tls=true"
+      - "traefik.http.routers.slipmatz-web.tls.certresolver=le"
+      - "traefik.http.services.slipmatz-web.loadbalancer.server.port=3000"
+      # HTTP to HTTPS redirect
+      - "traefik.http.routers.slipmatz-web-http.rule=Host(`${DOMAIN:-slipmatz.com}`)"
+      - "traefik.http.routers.slipmatz-web-http.entrypoints=web"
+      - "traefik.http.routers.slipmatz-web-http.middlewares=https-redirect"
+      - "traefik.http.middlewares.https-redirect.redirectscheme.scheme=https"
     networks:
+      - traefik-public
+      - crew-app-net
       - slipmatz-network
     healthcheck:
       test: ["CMD", "node", "-e", "require('http').get('http://localhost:3000/', (r) => {process.exit(r.statusCode === 200 ? 0 : 1)})"]
@@ -30,5 +44,9 @@ services:
       start_period: 40s
 
 networks:
+  traefik-public:
+    external: true
+  crew-app-net:
+    external: true
   slipmatz-network:
     driver: bridge