From f3cbdf5052af5c518d09a106d543437e10e8ae14 Mon Sep 17 00:00:00 2001
From: Jeff Emmett <jeff@jeffemmett.com>
Date: Mon, 16 Feb 2026 20:52:39 +0000
Subject: [PATCH] Add websecure entrypoint with self-signed cert for Cloudflare
 Full SSL

Cloudflare Full SSL mode requires TLS on the origin. Added self-signed
cert to Traefik config and re-enabled websecure router without ACME
certresolver (Cloudflare handles public TLS, tunnel is already encrypted).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 docker-compose.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/docker-compose.yml b/docker-compose.yml
index c82e4b1..e2a9eaf 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -21,6 +21,8 @@ services:
       - DAC_OVERRIDE
     security_opt:
       - no-new-privileges:true
+    ports:
+      - "8888:80"
     networks:
       - traefik-public
     labels: