Update docker-compose.yml to follow dcape conventions

- Add dcape.traefik.tag label (required for Traefik discovery)
- Add traefik.enable and tls.certresolver labels
- Add standard volume mounts for timezone and SSL certs
- Configure dcape network as external
- Set restart policy to always

docker-compose.yml

@@ -2,12 +2,26 @@
 
 services:
   app:
+    image: ${IMAGE}:${IMAGE_VER}
     labels:
+      - traefik.enable=true
+      - dcape.traefik.tag=${DCAPE_TAG}
       - traefik.http.routers.${APP_TAG}.rule=Host(`${APP_SITE:?Must be set}`)
-      # TLS support
+      - traefik.http.routers.${APP_TAG}.tls=${USE_TLS}
+      - traefik.http.routers.${APP_TAG}.tls.certresolver=default
       - traefik.http.routers.${APP_TAG}.tls.domains[0].main=${APP_SITE}
     build:
       context: .
       args:
         IMAGE: "${IMAGE}"
         IMAGE_VER: "${IMAGE_VER}"
+    volumes:
+      - /etc/timezone:/etc/timezone:ro
+      - /etc/localtime:/etc/localtime:ro
+      - /etc/ssl/certs:/etc/ssl/certs:ro
+    restart: always
+
+networks:
+  default:
+    name: ${DCAPE_NET}
+    external: true