feat: 部屬舊環境

socat/docker-compose.yaml

@@ -1,4 +1,352 @@
 services:
+  # --- DS116 主要代理服務 ---
+  ds116:
+    # === 容器基本設定 ===
+    image: alpine/socat:latest                                              # Alpine Linux + socat 工具
+    container_name: socat_ds116
+
+    # === Traefik 標籤設定 ===
+    labels:
+      - "traefik.enable=true"                                               # 啟用 Traefik 代理
+      - "traefik.docker.network=traefik_vlan"                               # 指定網路
+
+      # --- HTTP 服務配置 ---
+      - "traefik.http.services.ds116.loadbalancer.server.scheme=https"      # 服務協議為 HTTPS
+      - "traefik.http.services.ds116.loadbalancer.server.port=5001"         # 後端服務連接埠 5001
+
+      # --- HTTP 路由 (轉導至 HTTPS) ---
+      - "traefik.http.routers.ds116.entrypoints=http"                       # HTTP 入口點
+      - "traefik.http.routers.ds116.rule=Host(`ds116.jsc.idv.me`)"          # 域名規則
+      - "traefik.http.routers.ds116.middlewares=https-redirect@docker"      # 強制 HTTPS 轉導
+
+      # --- HTTPS 路由 ---
+      - "traefik.http.routers.ds116-tls.entrypoints=https"                  # HTTPS 入口點
+      - "traefik.http.routers.ds116-tls.rule=Host(`ds116.jsc.idv.me`)"      # 域名規則
+      - "traefik.http.routers.ds116-tls.middlewares=gzip@docker"            # 啟用 Gzip 壓縮
+      - "traefik.http.routers.ds116-tls.service=ds116"                      # 指向服務
+      - "traefik.http.routers.ds116-tls.tls=true"                           # 啟用 TLS
+
+      # --- HTTPS 路由 (Let's Encrypt) ---
+      - "traefik.http.routers.ds116-letsencrypt.entrypoints=https"          # HTTPS 入口點
+      - "traefik.http.routers.ds116-letsencrypt.rule=Host(`ds116.jsc.idv.tw`)"  # 域名規則
+      - "traefik.http.routers.ds116-letsencrypt.middlewares=gzip@docker"    # 啟用 Gzip 壓縮
+      - "traefik.http.routers.ds116-letsencrypt.service=ds116"              # 指向服務
+      - "traefik.http.routers.ds116-letsencrypt.tls=true"                   # 啟用 TLS
+      - "traefik.http.routers.ds116-letsencrypt.tls.certresolver=letsencrypt"  # 使用 Let's Encrypt 證書
+
+    # === 環境變數設定 ===
+    environment:
+      TZ: "Asia/Taipei"                                                     # 時區設定 (台北時間 UTC+8)
+
+    # === 網路設定 ===
+    networks:
+      - vlan                                                                # 使用 traefik_vlan 網路
+
+    # === Socat 代理指令 ===
+    command: "-d -d tcp-listen:5001,reuseaddr,fork tcp:192.168.1.101:5001"  # TCP 代理至 DS116
+
+    # === 日誌管理 ===
+    logging:
+      driver: "json-file"                                                   # 使用 JSON 檔案記錄日誌
+      options:
+        max-size: "1m"                                                      # 單一日誌檔案最大 1MB
+
+    # === 重新啟動策略 ===
+    restart: always                                                         # 容器異常退出時自動重啟
+  
+  # --- DS116 Bitwarden 主要代理服務 ---
+  ds116-bitwarden:
+    # === 容器基本設定 ===
+    image: alpine/socat:latest                                              # Alpine Linux + socat 工具
+    container_name: socat_ds116_bitwarden
+
+    # === Traefik 標籤設定 ===
+    labels:
+      - "traefik.enable=true"                                               # 啟用 Traefik 代理
+      - "traefik.docker.network=traefik_vlan"                               # 指定網路
+
+      # --- HTTP 服務配置 ---
+      - "traefik.http.services.ds116-bitwarden.loadbalancer.server.scheme=http"   # 服務協議為 HTTP
+      - "traefik.http.services.ds116-bitwarden.loadbalancer.server.port=52080"    # 後端服務連接埠 52080
+
+      # --- HTTP 路由 (轉導至 HTTPS) ---
+      - "traefik.http.routers.ds116-bitwarden.entrypoints=http"                   # HTTP 入口點
+      - "traefik.http.routers.ds116-bitwarden.rule=Host(`bitwarden.jsc.idv.me`)"  # 域名規則
+      - "traefik.http.routers.ds116-bitwarden.middlewares=https-redirect@docker"  # 強制 HTTPS 轉導
+
+      # --- HTTPS 路由 ---
+      - "traefik.http.routers.ds116-bitwarden-tls.entrypoints=https"              # HTTPS 入口點
+      - "traefik.http.routers.ds116-bitwarden-tls.rule=Host(`bitwarden.jsc.idv.me`)"  # 域名規則
+      - "traefik.http.routers.ds116-bitwarden-tls.middlewares=gzip@docker"        # 啟用 Gzip 壓縮
+      - "traefik.http.routers.ds116-bitwarden-tls.service=ds116-bitwarden"        # 指向服務
+      - "traefik.http.routers.ds116-bitwarden-tls.tls=true"                       # 啟用 TLS
+
+      # --- HTTPS 路由 (Let's Encrypt) ---
+      - "traefik.http.routers.ds116-bitwarden-letsencrypt.entrypoints=https"      # HTTPS 入口點
+      - "traefik.http.routers.ds116-bitwarden-letsencrypt.rule=Host(`bitwarden.jsc.idv.tw`)"  # 域名規則
+      - "traefik.http.routers.ds116-bitwarden-letsencrypt.middlewares=gzip@docker"  # 啟用 Gzip 壓縮
+      - "traefik.http.routers.ds116-bitwarden-letsencrypt.service=ds116-bitwarden"  # 指向服務
+      - "traefik.http.routers.ds116-bitwarden-letsencrypt.tls=true"               # 啟用 TLS
+      - "traefik.http.routers.ds116-bitwarden-letsencrypt.tls.certresolver=letsencrypt"  # 使用 Let's Encrypt 證書
+
+    # === 環境變數設定 ===
+    environment:
+      TZ: "Asia/Taipei"                                                     # 時區設定 (台北時間 UTC+8)
+
+    # === 網路設定 ===
+    networks:
+      - vlan                                                                # 使用 traefik_vlan 網路
+
+    # === Socat 代理指令 ===
+    command: "-d -d tcp-listen:52080,reuseaddr,fork tcp:192.168.1.102:52080" # TCP 代理至 DS116 Bitwarden
+
+    # === 日誌管理 ===
+    logging:
+      driver: "json-file"                                                   # 使用 JSON 檔案記錄日誌
+      options:
+        max-size: "1m"                                                      # 單一日誌檔案最大 1MB
+
+    # === 重新啟動策略 ===
+    restart: always                                                         # 容器異常退出時自動重啟
+
+  # --- DS718 主要代理服務 ---
+  ds718:
+    # === 容器基本設定 ===
+    image: alpine/socat:latest                                              # Alpine Linux + socat 工具
+    container_name: socat_ds718
+
+    # === Traefik 標籤設定 ===
+    labels:
+      - "traefik.enable=true"                                               # 啟用 Traefik 代理
+      - "traefik.docker.network=traefik_vlan"                               # 指定網路
+
+      # --- HTTP 服務配置 ---
+      - "traefik.http.services.ds718.loadbalancer.server.scheme=https"      # 服務協議為 HTTPS
+      - "traefik.http.services.ds718.loadbalancer.server.port=5001"         # 後端服務連接埠 5001
+
+      # --- HTTP 路由 (轉導至 HTTPS) ---
+      - "traefik.http.routers.ds718.entrypoints=http"                       # HTTP 入口點
+      - "traefik.http.routers.ds718.rule=Host(`ds718.jsc.idv.me`)"          # 域名規則
+      - "traefik.http.routers.ds718.middlewares=https-redirect@docker"      # 強制 HTTPS 轉導
+
+      # --- HTTPS 路由 ---
+      - "traefik.http.routers.ds718-tls.entrypoints=https"                  # HTTPS 入口點
+      - "traefik.http.routers.ds718-tls.rule=Host(`ds718.jsc.idv.me`)"      # 域名規則
+      - "traefik.http.routers.ds718-tls.middlewares=gzip@docker"            # 啟用 Gzip 壓縮
+      - "traefik.http.routers.ds718-tls.service=ds718"                      # 指向服務
+      - "traefik.http.routers.ds718-tls.tls=true"                           # 啟用 TLS
+
+      # --- HTTPS 路由 (Let's Encrypt) ---
+      - "traefik.http.routers.ds718-letsencrypt.entrypoints=https"          # HTTPS 入口點
+      - "traefik.http.routers.ds718-letsencrypt.rule=Host(`ds718.jsc.idv.tw`)"  # 域名規則
+      - "traefik.http.routers.ds718-letsencrypt.middlewares=gzip@docker"    # 啟用 Gzip 壓縮
+      - "traefik.http.routers.ds718-letsencrypt.service=ds718"              # 指向服務
+      - "traefik.http.routers.ds718-letsencrypt.tls=true"                   # 啟用 TLS
+      - "traefik.http.routers.ds718-letsencrypt.tls.certresolver=letsencrypt"  # 使用 Let's Encrypt 證書
+
+    # === 環境變數設定 ===
+    environment:
+      TZ: "Asia/Taipei"                                                     # 時區設定 (台北時間 UTC+8)
+
+    # === 網路設定 ===
+    networks:
+      - vlan                                                                # 使用 traefik_vlan 網路
+
+    # === Socat 代理指令 ===
+    command: "-d -d tcp-listen:5001,reuseaddr,fork tcp:192.168.1.102:5001"  # TCP 代理至 DS718
+
+    # === 日誌管理 ===
+    logging:
+      driver: "json-file"                                                   # 使用 JSON 檔案記錄日誌
+      options:
+        max-size: "1m"                                                      # 單一日誌檔案最大 1MB
+
+    # === 重新啟動策略 ===
+    restart: always                                                         # 容器異常退出時自動重啟
+
+  # --- DS718 主要代理服務 ---
+  flaresolverr:
+    # === 容器基本設定 ===
+    image: alpine/socat:latest                                              # Alpine Linux + socat 工具
+    container_name: socat_flaresolverr
+
+    # === Traefik 標籤設定 ===
+    labels:
+      - "traefik.enable=true"                                               # 啟用 Traefik 代理
+      - "traefik.docker.network=traefik_vlan"                               # 指定網路
+
+      # --- HTTP 服務配置 ---
+      - "traefik.http.services.flaresolverr.loadbalancer.server.scheme=https"      # 服務協議為 HTTPS
+      - "traefik.http.services.flaresolverr.loadbalancer.server.port=8191"         # 後端服務連接埠 5001
+
+      # --- HTTP 路由 (轉導至 HTTPS) ---
+      - "traefik.http.routers.flaresolverr.entrypoints=http"                       # HTTP 入口點
+      - "traefik.http.routers.flaresolverr.rule=Host(`flaresolverr.jsc.idv.me`)"          # 域名規則
+      - "traefik.http.routers.flaresolverr.middlewares=https-redirect@docker"      # 強制 HTTPS 轉導
+
+      # --- HTTPS 路由 ---
+      - "traefik.http.routers.flaresolverr-tls.entrypoints=https"                  # HTTPS 入口點
+      - "traefik.http.routers.flaresolverr-tls.rule=Host(`flaresolverr.jsc.idv.me`)"      # 域名規則
+      - "traefik.http.routers.flaresolverr-tls.middlewares=gzip@docker"            # 啟用 Gzip 壓縮
+      - "traefik.http.routers.flaresolverr-tls.service=flaresolverr"                      # 指向服務
+      - "traefik.http.routers.flaresolverr-tls.tls=true"                           # 啟用 TLS
+
+      # --- HTTPS 路由 (Let's Encrypt) ---
+      - "traefik.http.routers.flaresolverr-letsencrypt.entrypoints=https"          # HTTPS 入口點
+      - "traefik.http.routers.flaresolverr-letsencrypt.rule=Host(`flaresolverr.jsc.idv.tw`)"  # 域名規則
+      - "traefik.http.routers.flaresolverr-letsencrypt.middlewares=gzip@docker"    # 啟用 Gzip 壓縮
+      - "traefik.http.routers.flaresolverr-letsencrypt.service=flaresolverr"              # 指向服務
+      - "traefik.http.routers.flaresolverr-letsencrypt.tls=true"                   # 啟用 TLS
+      - "traefik.http.routers.flaresolverr-letsencrypt.tls.certresolver=letsencrypt"  # 使用 Let's Encrypt 證書
+
+    # === 環境變數設定 ===
+    environment:
+      TZ: "Asia/Taipei"                                                     # 時區設定 (台北時間 UTC+8)
+
+    # === 網路設定 ===
+    networks:
+      - vlan                                                                # 使用 traefik_vlan 網路
+
+    # === Socat 代理指令 ===
+    command: "-d -d tcp-listen:8191,reuseaddr,fork tcp:192.168.1.203:8191"  # TCP 代理至 DS718
+
+    # === 日誌管理 ===
+    logging:
+      driver: "json-file"                                                   # 使用 JSON 檔案記錄日誌
+      options:
+        max-size: "1m"                                                      # 單一日誌檔案最大 1MB
+
+    # === 重新啟動策略 ===
+    restart: always                                                         # 容器異常退出時自動重啟
+
+  # --- DS718 主要代理服務 ---
+  download:
+    # === 容器基本設定 ===
+    image: alpine/socat:latest                                              # Alpine Linux + socat 工具
+    container_name: socat_download
+
+    # === Traefik 標籤設定 ===
+    labels:
+      - "traefik.enable=true"                                               # 啟用 Traefik 代理
+      - "traefik.docker.network=traefik_vlan"                               # 指定網路
+
+      # --- HTTP 服務配置 ---
+      - "traefik.http.services.download.loadbalancer.server.scheme=http"      # 服務協議為 HTTPS
+      - "traefik.http.services.download.loadbalancer.server.port=5000"         # 後端服務連接埠 5001
+      # --- HTTP 路由 (轉導至 HTTPS) ---
+      - "traefik.http.routers.download.entrypoints=http"                       # HTTP 入口點
+      - "traefik.http.routers.download.rule=Host(`download.jsc.idv.me`)"          # 域名規則
+      - "traefik.http.routers.download.middlewares=https-redirect@docker"      # 強制 HTTPS 轉導
+
+      # --- HTTPS 路由 ---
+      - "traefik.http.routers.download-tls.entrypoints=https"                  # HTTPS 入口點
+      - "traefik.http.routers.download-tls.rule=Host(`download.jsc.idv.me`)"      # 域名規則
+      - "traefik.http.routers.download-tls.middlewares=gzip@docker"            # 啟用 Gzip 壓縮
+      - "traefik.http.routers.download-tls.service=download"                      # 指向服務
+      - "traefik.http.routers.download-tls.tls=true"                           # 啟用 TLS
+
+      # --- HTTPS 路由 (Let's Encrypt) ---
+      - "traefik.http.routers.download-letsencrypt.entrypoints=https"          # HTTPS 入口點
+      - "traefik.http.routers.download-letsencrypt.rule=Host(`download.jsc.idv.tw`)"  # 域名規則
+      - "traefik.http.routers.download-letsencrypt.middlewares=gzip@docker,auth@docker"    # 啟用 Gzip 壓縮
+      - "traefik.http.routers.download-letsencrypt.service=download"              # 指向服務
+      - "traefik.http.routers.download-letsencrypt.tls=true"                   # 啟用 TLS
+      - "traefik.http.routers.download-letsencrypt.tls.certresolver=letsencrypt"  # 使用 Let's Encrypt 證書
+
+    # === 環境變數設定 ===
+    environment:
+      TZ: "Asia/Taipei"                                                     # 時區設定 (台北時間 UTC+8)
+
+    # === 網路設定 ===
+    networks:
+      - vlan                                                                # 使用 traefik_vlan 網路
+
+    # === Socat 代理指令 ===
+    command: "-d -d tcp-listen:5000,reuseaddr,fork tcp:192.168.1.203:5000"  # TCP 代理至 DS718
+
+    # === 日誌管理 ===
+    logging:
+      driver: "json-file"                                                   # 使用 JSON 檔案記錄日誌
+      options:
+        max-size: "1m"                                                      # 單一日誌檔案最大 1MB
+
+    # === 重新啟動策略 ===
+    restart: always                                                         # 容器異常退出時自動重啟
+
+  # --- DS718 主要代理服務 ---
+  download-1:
+    # === 容器基本設定 ===
+    image: alpine/socat:latest                                              # Alpine Linux + socat 工具
+    container_name: socat_download_1
+
+    # === Traefik 標籤設定 ===
+    labels:
+      - "traefik.enable=true"                                               # 啟用 Traefik 代理
+      - "traefik.docker.network=traefik_vlan"                               # 指定網路
+      
+      # --- HTTP 服務配置 (負載平衡器設定) ---
+      - "traefik.http.services.download.loadbalancer.server.scheme=http" # 服務協議為 HTTP (統一服務名稱)
+      - "traefik.http.services.download.loadbalancer.server.port=5001"     # 後端服務連接埠 80
+      - "traefik.http.services.download.loadbalancer.healthcheck.path=/hangfire" # 健康檢查路徑
+      - "traefik.http.services.download.loadbalancer.healthcheck.interval=30s" # 健康檢查間隔
+
+    # === 環境變數設定 ===
+    environment:
+      TZ: "Asia/Taipei"                                                     # 時區設定 (台北時間 UTC+8)
+
+    # === 網路設定 ===
+    networks:
+      - vlan                                                                # 使用 traefik_vlan 網路
+
+    # === Socat 代理指令 ===
+    command: "-d -d tcp-listen:5001,reuseaddr,fork tcp:192.168.1.203:5001"  # TCP 代理至 DS718
+
+    # === 日誌管理 ===
+    logging:
+      driver: "json-file"                                                   # 使用 JSON 檔案記錄日誌
+      options:
+        max-size: "1m"                                                      # 單一日誌檔案最大 1MB
+
+    # === 重新啟動策略 ===
+    restart: always                                                         # 容器異常退出時自動重啟
+
+  # --- DS718 主要代理服務 ---
+  download-2:
+    # === 容器基本設定 ===
+    image: alpine/socat:latest                                              # Alpine Linux + socat 工具
+    container_name: socat_download_2
+
+    # === Traefik 標籤設定 ===
+    labels:
+      - "traefik.enable=true"                                               # 啟用 Traefik 代理
+      - "traefik.docker.network=traefik_vlan"                               # 指定網路
+      
+      # --- HTTP 服務配置 (負載平衡器設定) ---
+      - "traefik.http.services.download.loadbalancer.server.scheme=http" # 服務協議為 HTTP (統一服務名稱)
+      - "traefik.http.services.download.loadbalancer.server.port=5002"     # 後端服務連接埠 5002
+      - "traefik.http.services.download.loadbalancer.healthcheck.path=/hangfire" # 健康檢查路徑
+      - "traefik.http.services.download.loadbalancer.healthcheck.interval=30s" # 健康檢查間隔
+
+    # === 環境變數設定 ===
+    environment:
+      TZ: "Asia/Taipei"                                                     # 時區設定 (台北時間 UTC+8)
+
+    # === 網路設定 ===
+    networks:
+      - vlan                                                                # 使用 traefik_vlan 網路
+
+    # === Socat 代理指令 ===
+    command: "-d -d tcp-listen:5002,reuseaddr,fork tcp:192.168.1.203:5002"  # TCP 代理至 DS718
+
+    # === 日誌管理 ===
+    logging:
+      driver: "json-file"                                                   # 使用 JSON 檔案記錄日誌
+      options:
+        max-size: "1m"                                                      # 單一日誌檔案最大 1MB
+
+    # === 重新啟動策略 ===
+    restart: always                                                         # 容器異常退出時自動重啟
+
   # --- Proxmox VE 主要代理服務 ---
   pve:
     # === 容器基本設定 ===
@@ -26,6 +374,14 @@ services:
       - "traefik.http.routers.pve-tls.service=pve"                          # 指向服務
       - "traefik.http.routers.pve-tls.tls=true"                             # 啟用 TLS
 
+      # --- HTTPS 路由 (Let's Encrypt) ---
+      - "traefik.http.routers.pve-letsencrypt.entrypoints=https"            # HTTPS 入口點
+      - "traefik.http.routers.pve-letsencrypt.rule=Host(`pve.jsc.idv.tw`)"  # 域名規則
+      - "traefik.http.routers.pve-letsencrypt.middlewares=gzip@docker"      # 啟用 Gzip 壓縮
+      - "traefik.http.routers.pve-letsencrypt.service=pve"                  # 指向服務
+      - "traefik.http.routers.pve-letsencrypt.tls=true"                     # 啟用 TLS
+      - "traefik.http.routers.pve-letsencrypt.tls.certresolver=letsencrypt"  # 使用 Let's Encrypt 證書
+
     # === 環境變數設定 ===
     environment:
       TZ: "Asia/Taipei"                                                     # 時區設定 (台北時間 UTC+8)
@@ -35,7 +391,7 @@ services:
       - vlan                                                                # 使用 traefik_vlan 網路
 
     # === Socat 代理指令 ===
-    command: "-d -d tcp-listen:8006,reuseaddr,fork tcp:192.168.30.200:8006"  # TCP 代理至 Proxmox VE
+    command: "-d -d tcp-listen:8006,reuseaddr,fork tcp:192.168.1.202:8006"  # TCP 代理至 Proxmox VE
 
     # === 日誌管理 ===
     logging:
@@ -73,6 +429,14 @@ services:
       - "traefik.http.routers.gitea-tls.service=gitea"                      # 指向服務
       - "traefik.http.routers.gitea-tls.tls=true"                           # 啟用 TLS
 
+      # --- HTTPS 路由 (Let's Encrypt) ---
+      - "traefik.http.routers.gitea-letsencrypt.entrypoints=https"          # HTTPS 入口點
+      - "traefik.http.routers.gitea-letsencrypt.rule=Host(`gitea.jsc.idv.tw`)"  # 域名規則
+      - "traefik.http.routers.gitea-letsencrypt.middlewares=gzip@docker"    # 啟用 Gzip 壓縮
+      - "traefik.http.routers.gitea-letsencrypt.service=gitea"              # 指向服務
+      - "traefik.http.routers.gitea-letsencrypt.tls=true"                   # 啟用 TLS
+      - "traefik.http.routers.gitea-letsencrypt.tls.certresolver=letsencrypt"  # 使用 Let's Encrypt 證書
+
     # === 環境變數設定 ===
     environment:
       TZ: "Asia/Taipei"                                                     # 時區設定 (台北時間 UTC+8)
@@ -82,7 +446,7 @@ services:
       - vlan                                                                # 使用 traefik_vlan 網路
 
     # === Socat 代理指令 ===
-    command: "-d -d tcp-listen:3000,reuseaddr,fork tcp:192.168.30.221:3000"  # TCP 代理至 Gitea
+    command: "-d -d tcp-listen:3000,reuseaddr,fork tcp:192.168.1.201:3000"  # TCP 代理至 Gitea
 
     # === 日誌管理 ===
     logging:
@@ -120,6 +484,14 @@ services:
       - "traefik.http.routers.ezbookkeeping-tls.service=ezbookkeeping"            # 指向服務
       - "traefik.http.routers.ezbookkeeping-tls.tls=true"                         # 啟用 TLS
 
+      # --- HTTPS 路由 (Let's Encrypt) ---
+      - "traefik.http.routers.ezbookkeeping-letsencrypt.entrypoints=https"        # HTTPS 入口點
+      - "traefik.http.routers.ezbookkeeping-letsencrypt.rule=Host(`ezbookkeeping.jsc.idv.tw`)"  # 域名規則
+      - "traefik.http.routers.ezbookkeeping-letsencrypt.middlewares=gzip@docker"  # 啟用 Gzip 壓縮
+      - "traefik.http.routers.ezbookkeeping-letsencrypt.service=ezbookkeeping"    # 指向服務
+      - "traefik.http.routers.ezbookkeeping-letsencrypt.tls=true"                 # 啟用 TLS
+      - "traefik.http.routers.ezbookkeeping-letsencrypt.tls.certresolver=letsencrypt"  # 使用 Let's Encrypt 證書
+
     # === 環境變數設定 ===
     environment:
       TZ: "Asia/Taipei"                                                     # 時區設定 (台北時間 UTC+8)
@@ -167,6 +539,14 @@ services:
       - "traefik.http.routers.ds225-tls.service=ds225"                      # 指向服務
       - "traefik.http.routers.ds225-tls.tls=true"                           # 啟用 TLS
 
+      # --- HTTPS 路由 (Let's Encrypt) ---
+      - "traefik.http.routers.ds225-letsencrypt.entrypoints=https"          # HTTPS 入口點
+      - "traefik.http.routers.ds225-letsencrypt.rule=Host(`ds225.jsc.idv.tw`)"  # 域名規則
+      - "traefik.http.routers.ds225-letsencrypt.middlewares=gzip@docker"    # 啟用 Gzip 壓縮
+      - "traefik.http.routers.ds225-letsencrypt.service=ds225"              # 指向服務
+      - "traefik.http.routers.ds225-letsencrypt.tls=true"                   # 啟用 TLS
+      - "traefik.http.routers.ds225-letsencrypt.tls.certresolver=letsencrypt"  # 使用 Let's Encrypt 證書
+
     # === 環境變數設定 ===
     environment:
       TZ: "Asia/Taipei"                                                     # 時區設定 (台北時間 UTC+8)