# ── Cookie Consent (Static Files) ──────────────────────────────────────
  # Einbindung auf jeder Seite:
  #   <link rel="stylesheet" href="https://consent.promantis.de/cookieconsent.css">
  #   <link rel="stylesheet" href="https://consent.promantis.de/promantis-consent.css">
  #   <script defer src="https://consent.promantis.de/cookieconsent.js"></script>
  #   <script defer src="https://consent.promantis.de/consent-config.js"></script>
  cookie-consent:
    image: ghcr.io/sgpromantis/static-file-server:latest
    container_name: cookie-consent
    restart: unless-stopped
    environment:
      - FOLDER=/web
      - CORS=true
      - CORS_ALLOWED_ORIGINS=*
    volumes:
      - ./cookie-consent:/web:ro
    networks:
      - proxy
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.cookie-consent.entrypoints=http"
      - "traefik.http.routers.cookie-consent.rule=Host(`consent.${DOMAIN}`)"
      - "traefik.http.middlewares.cookie-consent-redirect.redirectscheme.scheme=https"
      - "traefik.http.routers.cookie-consent.middlewares=cookie-consent-redirect"
      - "traefik.http.routers.cookie-consent-secure.entrypoints=https"
      - "traefik.http.routers.cookie-consent-secure.rule=Host(`consent.${DOMAIN}`)"
      - "traefik.http.routers.cookie-consent-secure.tls=true"
      - "traefik.http.routers.cookie-consent-secure.tls.certresolver=letsencrypt"
      - "traefik.http.routers.cookie-consent-secure.service=cookie-consent"
      - "traefik.http.services.cookie-consent.loadbalancer.server.port=8080"
      - "traefik.http.routers.cookie-consent-secure.middlewares=cookie-consent-cors"
      # CORS Headers für Cross-Origin Einbindung
      - "traefik.http.middlewares.cookie-consent-cors.headers.accessControlAllowOriginList=*"
      - "traefik.http.middlewares.cookie-consent-cors.headers.accessControlAllowMethods=GET,OPTIONS"
      - "traefik.http.middlewares.cookie-consent-cors.headers.accessControlAllowHeaders=Content-Type"
      - "traefik.http.middlewares.cookie-consent-cors.headers.accessControlMaxAge=86400"
      - "traefik.docker.network=proxy"
      - "com.centurylinklabs.watchtower.enable=true"