refactor: заменить Caddy на Traefik v3

Co-authored-by: Cursor <cursoragent@cursor.com>

docker-compose.yml

@@ -53,26 +53,33 @@ services:
     environment:
       APP_PORT: "8080"
       DATABASE_URL: postgres://${POSTGRES_USER:-shop}:${POSTGRES_PASSWORD:-shop_secret}@postgres:5432/${POSTGRES_DB:-shopdb}?sslmode=require
+      COOKIE_SECURE: ${COOKIE_SECURE:-false}
     networks:
       - backend
       - frontend
     restart: unless-stopped
 
-  caddy:
-    image: caddy:2-alpine
-    container_name: shop-caddy
+  traefik:
+    image: traefik:v3.2
+    container_name: shop-traefik
     depends_on:
       - app
-    environment:
-      SITE_DOMAIN: ${SITE_DOMAIN:-localhost}
-      CADDY_EMAIL: ${CADDY_EMAIL:-admin@localhost}
+    command:
+      - --log.level=INFO
+      - --accesslog=true
+      - --providers.file.directory=/etc/traefik/dynamic
+      - --providers.file.watch=true
+      - --entrypoints.web.address=:80
+      - --entrypoints.websecure.address=:443
+      - --certificatesresolvers.letsencrypt.acme.email=${ACME_EMAIL:-admin@localhost}
+      - --certificatesresolvers.letsencrypt.acme.storage=/letsencrypt/acme.json
+      - --certificatesresolvers.letsencrypt.acme.httpchallenge.entrypoint=web
     ports:
       - "${HTTP_PORT:-80}:80"
       - "${HTTPS_PORT:-443}:443"
     volumes:
-      - ./caddy/Caddyfile:/etc/caddy/Caddyfile:ro
-      - caddy_data:/data
-      - caddy_config:/config
+      - ./traefik/dynamic:/etc/traefik/dynamic:ro
+      - traefik_letsencrypt:/letsencrypt
     networks:
       - frontend
     restart: unless-stopped
@@ -80,8 +87,7 @@ services:
 volumes:
   postgres_data:
   postgres_ssl:
-  caddy_data:
-  caddy_config:
+  traefik_letsencrypt:
 
 networks:
   backend: