[Unit]
Description=PostgreSQL Main Database
After=network-online.target

[Container]
ContainerName=postgres-main
Image=docker.io/library/postgres:17-alpine

Environment=POSTGRES_USER=saveinmed
Environment=POSTGRES_PASSWORD=ZTLY4Ks34geDVvjOiLWKor8n4J4
Environment=POSTGRES_DB=saveinmed

Volume=/mnt/data/postgres:/var/lib/postgresql/data:Z

Network=web_proxy
NetworkAlias=postgres-main

# External Access via Traefik (TCP Over TLS)
Label=traefik.enable=true
Label=traefik.tcp.routers.postgres-main.rule=HostSNI(`db.nc1.rede5.com.br`)
Label=traefik.tcp.routers.postgres-main.entrypoints=websecure
Label=traefik.tcp.routers.postgres-main.tls=true
Label=traefik.tcp.routers.postgres-main.tls.certresolver=myresolver
Label=traefik.tcp.services.postgres-main.loadbalancer.server.port=5432
Label=traefik.docker.network=web_proxy

[Install]
WantedBy=multi-user.target