feat: expose admin console on HTTPS via Traefik port 3002

Traefik-only change: new entrypoint + router for TLS termination.
No changes to Logto ADMIN_ENDPOINT or bootstrap script.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

docker-compose.dev.yml

@@ -8,7 +8,6 @@ services:
   logto:
     ports:
       - "3001:3001"
-      - "3002:3002"
 
   cameleer-saas:
     ports:

docker-compose.yml

@@ -30,6 +30,7 @@ services:
     ports:
       - "80:80"
       - "443:443"
+      - "3002:3002"
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock:ro
       - ./traefik.yml:/etc/traefik/traefik.yml:ro
@@ -81,6 +82,11 @@ services:
       - traefik.http.routers.logto.entrypoints=websecure
       - traefik.http.routers.logto.tls=true
       - traefik.http.services.logto.loadbalancer.server.port=3001
+      - traefik.http.routers.logto-console.rule=PathPrefix(`/`)
+      - traefik.http.routers.logto-console.entrypoints=admin-console
+      - traefik.http.routers.logto-console.tls=true
+      - traefik.http.routers.logto-console.service=logto-console
+      - traefik.http.services.logto-console.loadbalancer.server.port=3002
     networks:
       - cameleer
 

traefik.yml

@@ -11,6 +11,8 @@ entryPoints:
           scheme: https
   websecure:
     address: ":443"
+  admin-console:
+    address: ":3002"
 
 providers:
   docker: