services:
  tinfoil-cli:
    restart: unless-stopped
    image: ghcr.io/tinfoilsh/tinfoil-cli:latest
    command: proxy -e inference.tinfoil.sh -r tinfoilsh/confidential-model-router -b 0.0.0.0 -p 8081
    networks:
      - proxy
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.tinfoil-proxy.rule=Host(`tinfoil.gandalf.dfas4.de`)"
      - "traefik.http.routers.tinfoil-proxy.entrypoints=websecure"
      - "traefik.http.routers.tinfoil-proxy.tls=true"
      - "traefik.http.routers.tinfoil-proxy.tls.certresolver=myresolver"
      - "traefik.http.services.tinfoil-proxy.loadbalancer.server.port=8081"
      - "traefik.http.routers.tinfoil-proxy.tls.domains[0].main=gandalf.dfas4.de"
      - "traefik.http.routers.tinfoil-proxy.tls.domains[0].sans=*.gandalf.dfas4.de"
networks:
  proxy:
    name: proxy