[Unit]
Description=PostgreSQL Database (NC2)
After=network-online.target

[Container]
ContainerName=postgres
Image=docker.io/library/postgres:16-alpine

Environment=POSTGRES_USER=admin
Environment=POSTGRES_PASSWORD=sua_senha_segura
Environment=POSTGRES_DB=app_db

# Existing volume on NC2
Volume=/mnt/postgres/data:/var/lib/postgresql/data:Z

Network=web_proxy
NetworkAlias=postgres

# External Access via Traefik (TCP Over TLS)
Label=traefik.enable=true
Label=traefik.tcp.routers.postgres-nc2.rule=HostSNI(`db.nc2.rede5.com.br`)
Label=traefik.tcp.routers.postgres-nc2.entrypoints=websecure
Label=traefik.tcp.routers.postgres-nc2.tls=true
Label=traefik.tcp.routers.postgres-nc2.tls.certresolver=myresolver
Label=traefik.tcp.services.postgres-nc2.loadbalancer.server.port=5432
Label=traefik.docker.network=web_proxy

[Install]
WantedBy=multi-user.target