From 2dfbbaf645a3f3d59bb3b8db52df3a8f5d00fbb1 Mon Sep 17 00:00:00 2001
From: notplants <@notplants>
Date: Mon, 3 Aug 2026 20:50:27 +0000
Subject: [PATCH] fix: force https via redirectscheme (replace deprecated
 Traefik v1 SSLForceHost/SSLHost) + correct comment

---
 compose.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/compose.yml b/compose.yml
index aae8dad..872f224 100644
--- a/compose.yml
+++ b/compose.yml
@@ -15,10 +15,10 @@ services:
         - "traefik.http.routers.${STACK_NAME}.rule=Host(`${DOMAIN}`${EXTRA_DOMAINS})"
         - "traefik.http.routers.${STACK_NAME}.entrypoints=web-secure"
         - "traefik.http.routers.${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}"
-        # Redirect from EXTRA_DOMAINS to DOMAIN
+        # Force HTTPS (redirect http -> https) on DOMAIN and any EXTRA_DOMAINS
         - "traefik.http.routers.${STACK_NAME}.middlewares=${STACK_NAME}-redirect"
-        - "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLForceHost=true"
-        - "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLHost=${DOMAIN}"
+        - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectscheme.scheme=https"
+        - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectscheme.permanent=true"
         - "coop-cloud.${STACK_NAME}.version=1.13.1+1.31.3"
         - "backupbot.backup=true"
         - "backupbot.backup.path=/usr/share/nginx/html"