Move perilous traefik routing from file provider to Docker labels

- Add traefik labels to perilous docker-compose.yml for web and code-server
- Remove stacks/traefik/conf.d/perilous.yml (no longer needed)
- Changed from host ports to expose (traefik routes directly to container)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

stacks/perilous/docker-compose.yml

@@ -3,24 +3,30 @@ services:
     build: .
     container_name: perilous-web
     restart: unless-stopped
-    ports:
+    expose:
-      - "3003:3000"
+      - "3000"
     volumes:
       - ./content:/usr/src/app/content
     environment:
       - EMAIL_PASSWORD=${PERILOUS_CODE_SERVER_PASSWORD}
     networks:
       - web
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.perilous.entrypoints=https"
+      - "traefik.http.routers.perilous.rule=Host(`perilous.dev`) || Host(`www.perilous.dev`) || HostRegexp(`{subdomain:[a-z0-9.]+}.perilous.dev`)"
+      - "traefik.http.routers.perilous.tls.certresolver=http"
+      - "traefik.http.services.perilous.loadbalancer.server.port=3000"
 
   code-server:
     image: lscr.io/linuxserver/code-server:latest
     container_name: perilous-code-server
     restart: unless-stopped
+    expose:
+      - "8443"
     volumes:
       - ./content:/home/project
       - ./config:/config
-    ports:
-      - "8180:8443"
     environment:
       - PASSWORD=${PERILOUS_CODE_SERVER_PASSWORD}
       - PUID=1000
@@ -29,6 +35,12 @@ services:
       - DEFAULT_WORKSPACE=/home/project
     networks:
       - web
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.perilous-cs.entrypoints=https"
+      - "traefik.http.routers.perilous-cs.rule=Host(`cs.perilous.dev`)"
+      - "traefik.http.routers.perilous-cs.tls.certresolver=http"
+      - "traefik.http.services.perilous-cs.loadbalancer.server.port=8443"
 
 networks:
   web:

stacks/traefik/conf.d/perilous.yml

@@ -1,28 +0,0 @@
-http:
-  routers:
-    perilous:
-      entrypoints:
-        - https
-      rule: "Host(`perilous.dev`) || Host(`www.perilous.dev`) || HostRegexp(`{subdomain:[a-z0-9.]+}.perilous.dev`)"
-      service: perilous
-      tls:
-        certResolver: http
-
-    perilous-cs:
-      entrypoints:
-        - https
-      rule: "Host(`cs.perilous.dev`)"
-      service: perilous-cs
-      tls:
-        certResolver: http
-
-  services:
-    perilous:
-      loadBalancer:
-        servers:
-          - url: "http://perilous-web:3000"
-
-    perilous-cs:
-      loadBalancer:
-        servers:
-          - url: "http://perilous-code-server:8443"