Initial Traefik reverse proxy configuration

Configure Traefik v2.10 with:
- Automatic HTTPS using Let's Encrypt
- HTTP to HTTPS redirect
- Docker service discovery
- Security headers middleware
- Dashboard with basic auth

Configured services:
- Mealie (recipes.pkartchner.com)
- Gogs (git.pkartchner.com)
- Traefik Dashboard (traefik.pkartchner.com)

Features:
- Automatic SSL certificate management
- Force HTTPS on all services
- Security headers (HSTS, frame options, XSS protection)
- Docker network isolation

Next steps: Configure DNS records and port forwarding (see SETUP-INSTRUCTIONS.md)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

config.yml

@@ -0,0 +1,30 @@
+http:
+  routers:
+    # Router for Gogs (if it's running outside Docker or on different network)
+    gogs:
+      rule: "Host(`git.pkartchner.com`)"
+      entryPoints:
+        - https
+      service: gogs
+      tls:
+        certResolver: letsencrypt
+
+  services:
+    # Service for Gogs
+    gogs:
+      loadBalancer:
+        servers:
+          - url: "http://gogs.pkartchner.com:3000"
+
+  middlewares:
+    # Security headers
+    secure-headers:
+      headers:
+        forceSTSHeader: true
+        stsIncludeSubdomains: true
+        stsPreload: true
+        stsSeconds: 31536000
+        customFrameOptionsValue: "SAMEORIGIN"
+        contentTypeNosniff: true
+        browserXssFilter: true
+        referrerPolicy: "same-origin"