Don't clobber Traefik's service name for SSO

[ci skip]

.env.sample

@@ -4,3 +4,8 @@ DOMAIN=custom-html.example.com
 ## Domain aliases
 #EXTRA_DOMAINS=', `www.custom-html.example.com`'
 LETS_ENCRYPT_ENV=production
+
+COMPOSE_FILE="compose.yml"
+
+# Single Sign On via Traefik "file provider"
+#COMPOSE_FILE="$COMPOSE_FILE:compose.sso.yml"

README.md

@@ -4,12 +4,12 @@ Custom HTML website, served using Nginx.
 
 <!-- metadata -->
 * **Category**: Apps
-* **Status**: ❷💛
-* **Image**: [`nginx`](https://hub.docker.com/_/nginx), ❶💚, upstream
+* **Status**: 2, beta
+* **Image**: [`nginx`](https://hub.docker.com/_/nginx), 4, upstream
 * **Healthcheck**: No
 * **Backups**: No
 * **Email**: N/A
-* **Tests**: ❷💛
+* **Tests**: 2
 * **SSO**: No
 <!-- endmetadata -->
 

compose.sso.yml

@@ -0,0 +1,8 @@
+version: "3.8"
+services:
+  app:
+    environment:
+      - TFA_MIDDLEWARE_NAME
+    deploy:
+      labels:
+        - "traefik.http.routers.${STACK_NAME}.middlewares=${TFA_MIDDLEWARE_NAME}@file"