fix frontend redirection

docker-compose.production.yml

@@ -91,45 +91,19 @@ services:
     restart: unless-stopped
     labels:
       - traefik.enable=true
-      # marketplace (port 3000) — /marketplace path, priority 20
-      - traefik.http.routers.marketplace.rule=Host(`${PUBLIC_SITE_DOMAIN}`) && PathPrefix(`/marketplace`)
-      - traefik.http.routers.marketplace.priority=20
-      - traefik.http.routers.marketplace.entrypoints=websecure
-      - traefik.http.routers.marketplace.tls=true
-      - traefik.http.routers.marketplace.tls.certresolver=letsencrypt
-      - traefik.http.routers.marketplace.service=marketplace-svc
-      - traefik.http.services.marketplace-svc.loadbalancer.server.port=3000
-      # dashboard (port 3001) — /dashboard path, priority 20
-      - traefik.http.routers.dashboard.rule=Host(`${PUBLIC_SITE_DOMAIN}`) && PathPrefix(`/dashboard`)
-      - traefik.http.routers.dashboard.priority=20
-      - traefik.http.routers.dashboard.entrypoints=websecure
-      - traefik.http.routers.dashboard.tls=true
-      - traefik.http.routers.dashboard.tls.certresolver=letsencrypt
-      - traefik.http.routers.dashboard.service=dashboard-svc
-      - traefik.http.services.dashboard-svc.loadbalancer.server.port=3001
-      # admin (port 3002) — /admin path, priority 20
-      - traefik.http.routers.admin.rule=Host(`${PUBLIC_SITE_DOMAIN}`) && PathPrefix(`/admin`)
-      - traefik.http.routers.admin.priority=20
-      - traefik.http.routers.admin.entrypoints=websecure
-      - traefik.http.routers.admin.tls=true
-      - traefik.http.routers.admin.tls.certresolver=letsencrypt
-      - traefik.http.routers.admin.service=admin-svc
-      - traefik.http.services.admin-svc.loadbalancer.server.port=3002
-      # public site (port 3003) — root domain, priority 10
-      - traefik.http.routers.public-site.rule=Host(`${PUBLIC_SITE_DOMAIN}`) || Host(`www.${PUBLIC_SITE_DOMAIN}`)
-      - traefik.http.routers.public-site.priority=10
-      - traefik.http.routers.public-site.entrypoints=websecure
-      - traefik.http.routers.public-site.tls=true
-      - traefik.http.routers.public-site.tls.certresolver=letsencrypt
-      - traefik.http.routers.public-site.service=public-site-svc
-      - traefik.http.services.public-site-svc.loadbalancer.server.port=3003
-      # tenant branded sites (port 3003) — {slug}.rentaldrivego.ma subdomains
-      - traefik.http.routers.public-site-tenants.rule=HostRegexp(`{subdomain:[a-z0-9-]+}.${PUBLIC_SITE_DOMAIN}`)
-      - traefik.http.routers.public-site-tenants.priority=10
-      - traefik.http.routers.public-site-tenants.entrypoints=websecure
-      - traefik.http.routers.public-site-tenants.tls=true
-      - traefik.http.routers.public-site-tenants.tls.certresolver=letsencrypt
-      - traefik.http.routers.public-site-tenants.service=public-site-svc
+      # all frontend traffic → port 3000 (public-site proxies /marketplace, /dashboard, /admin internally)
+      - traefik.http.routers.frontend.rule=Host(`${PUBLIC_SITE_DOMAIN}`) || Host(`www.${PUBLIC_SITE_DOMAIN}`)
+      - traefik.http.routers.frontend.entrypoints=websecure
+      - traefik.http.routers.frontend.tls=true
+      - traefik.http.routers.frontend.tls.certresolver=letsencrypt
+      - traefik.http.routers.frontend.service=frontend-svc
+      - traefik.http.services.frontend-svc.loadbalancer.server.port=3000
+      # tenant branded sites — {slug}.rentaldrivego.ma subdomains
+      - traefik.http.routers.frontend-tenants.rule=HostRegexp(`{subdomain:[a-z0-9-]+}.${PUBLIC_SITE_DOMAIN}`)
+      - traefik.http.routers.frontend-tenants.entrypoints=websecure
+      - traefik.http.routers.frontend-tenants.tls=true
+      - traefik.http.routers.frontend-tenants.tls.certresolver=letsencrypt
+      - traefik.http.routers.frontend-tenants.service=frontend-svc
 
   pgmanage:
     image: cmdpromptinc/pgmanage-enterprise:latest