fix: swarm stack deploy, proxy network, correct traefik labels for this infra

docker-compose.prod.yml

@@ -15,10 +15,13 @@ services:
       retries: 10
     networks:
       - internal
+    deploy:
+      replicas: 1
+      restart_policy:
+        condition: on-failure
 
   backend:
     image: ${REGISTRY}/saas-imobiliaria-backend:${IMAGE_TAG:-latest}
-    restart: unless-stopped
     environment:
       DATABASE_URL: postgresql://${POSTGRES_USER}:${POSTGRES_PASSWORD}@db:5432/${POSTGRES_DB}
       SECRET_KEY: ${SECRET_KEY}
@@ -27,55 +30,50 @@ services:
       FLASK_APP: app
       CORS_ORIGINS: https://${DOMAIN}
       IMAGE_TAG: ${IMAGE_TAG:-latest}
-    depends_on:
-      db:
-        condition: service_healthy
     networks:
       - internal
-      - traefik-public
-    labels:
-      - "traefik.enable=true"
-      - "traefik.docker.network=traefik-public"
-      # Router
-      - "traefik.http.routers.imob-api.rule=Host(`${DOMAIN}`) && PathPrefix(`/api`)"
-      - "traefik.http.routers.imob-api.entrypoints=websecure"
-      - "traefik.http.routers.imob-api.tls=true"
-      - "traefik.http.routers.imob-api.tls.certresolver=letsencrypt"
-      # Service
-      - "traefik.http.services.imob-api.loadbalancer.server.port=5000"
-      # Strip /api prefix before forwarding to Flask
-      - "traefik.http.middlewares.imob-api-strip.stripprefix.prefixes=/api"
-      - "traefik.http.routers.imob-api.middlewares=imob-api-strip"
+      - proxy
+    deploy:
+      replicas: 1
+      restart_policy:
+        condition: on-failure
+      labels:
+        - "traefik.enable=true"
+        - "traefik.docker.network=proxy"
+        # Router HTTPS
+        - "traefik.http.routers.imob-api.rule=Host(`${DOMAIN}`) && PathPrefix(`/api`)"
+        - "traefik.http.routers.imob-api.entrypoints=websecure"
+        - "traefik.http.routers.imob-api.tls=true"
+        - "traefik.http.routers.imob-api.tls.certresolver=letsencrypt"
+        - "traefik.http.routers.imob-api.middlewares=imob-strip-api"
+        # Strip /api prefix antes de chegar no Flask
+        - "traefik.http.middlewares.imob-strip-api.stripprefix.prefixes=/api"
+        # Service
+        - "traefik.http.services.imob-api.loadbalancer.server.port=5000"
 
   frontend:
     image: ${REGISTRY}/saas-imobiliaria-frontend:${IMAGE_TAG:-latest}
-    restart: unless-stopped
-    depends_on:
-      - backend
     networks:
-      - internal
-      - traefik-public
-    labels:
-      - "traefik.enable=true"
-      - "traefik.docker.network=traefik-public"
-      # Router
-      - "traefik.http.routers.imob-frontend.rule=Host(`${DOMAIN}`)"
-      - "traefik.http.routers.imob-frontend.entrypoints=websecure"
-      - "traefik.http.routers.imob-frontend.tls=true"
-      - "traefik.http.routers.imob-frontend.tls.certresolver=letsencrypt"
-      # Redirect HTTP → HTTPS
-      - "traefik.http.routers.imob-frontend-http.rule=Host(`${DOMAIN}`)"
-      - "traefik.http.routers.imob-frontend-http.entrypoints=web"
-      - "traefik.http.routers.imob-frontend-http.middlewares=redirect-to-https"
-      - "traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https"
-      - "traefik.http.middlewares.redirect-to-https.redirectscheme.permanent=true"
-      # Service
-      - "traefik.http.services.imob-frontend.loadbalancer.server.port=80"
+      - proxy
+    deploy:
+      replicas: 1
+      restart_policy:
+        condition: on-failure
+      labels:
+        - "traefik.enable=true"
+        - "traefik.docker.network=proxy"
+        # Router HTTPS
+        - "traefik.http.routers.imob-frontend.rule=Host(`${DOMAIN}`)"
+        - "traefik.http.routers.imob-frontend.entrypoints=websecure"
+        - "traefik.http.routers.imob-frontend.tls=true"
+        - "traefik.http.routers.imob-frontend.tls.certresolver=letsencrypt"
+        # Service
+        - "traefik.http.services.imob-frontend.loadbalancer.server.port=80"
 
 networks:
   internal:
-    driver: bridge
-  traefik-public:
+    driver: overlay
+  proxy:
     external: true
 
 volumes: