From 6497b59c55dd77cd3bee75e17b610b027d8044e7 Mon Sep 17 00:00:00 2001
From: hsiegeln <37154749+hsiegeln@users.noreply.github.com>
Date: Tue, 7 Apr 2026 00:18:16 +0200
Subject: [PATCH] feat: HTTPS admin console on port 3443 via Traefik

Use separate port 3443 for TLS-terminated admin console access.
Port 3002 stays directly mapped from logto in dev for Logto's
internal OIDC self-discovery via ADMIN_ENDPOINT.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 docker-compose.dev.yml | 1 +
 docker-compose.yml     | 2 +-
 traefik.yml            | 2 +-
 3 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/docker-compose.dev.yml b/docker-compose.dev.yml
index feb22f6..580577f 100644
--- a/docker-compose.dev.yml
+++ b/docker-compose.dev.yml
@@ -8,6 +8,7 @@ services:
   logto:
     ports:
       - "3001:3001"
+      - "3002:3002"
 
   cameleer-saas:
     ports:
diff --git a/docker-compose.yml b/docker-compose.yml
index 2d2e1ae..0b77045 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -30,7 +30,7 @@ services:
     ports:
       - "80:80"
       - "443:443"
-      - "3002:3002"
+      - "3443:3443"
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock:ro
       - ./traefik.yml:/etc/traefik/traefik.yml:ro
diff --git a/traefik.yml b/traefik.yml
index 27df844..716ef8a 100644
--- a/traefik.yml
+++ b/traefik.yml
@@ -12,7 +12,7 @@ entryPoints:
   websecure:
     address: ":443"
   admin-console:
-    address: ":3002"
+    address: ":3443"
 
 providers:
   docker: