From 96dc13c38aa2c3754964cb99227df1faff4a9668 Mon Sep 17 00:00:00 2001
From: Ho Ngoc Hai <hongochai10@icloud.com>
Date: Sun, 4 Jan 2026 14:52:30 +0700
Subject: [PATCH] =?UTF-8?q?fix:=20C=E1=BA=A5u=20h=C3=ACnh=20th=E1=BB=A7=20?=
 =?UTF-8?q?c=C3=B4ng=20Traefik=20v=C3=A0=20c=E1=BA=ADp=20nh=E1=BA=ADt=20ph?=
 =?UTF-8?q?i=C3=AAn=20b=E1=BA=A3n=20=C4=91=E1=BB=83=20kh=E1=BA=AFc=20ph?=
 =?UTF-8?q?=E1=BB=A5c=20s=E1=BB=B1=20c=E1=BB=91=20Docker=20provider=20c?=
 =?UTF-8?q?=E1=BB=A5c=20b=E1=BB=99.?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 apps/web-client/.env.local           |  2 ++
 deployments/local/docker-compose.yml |  7 +++++--
 infra/traefik/dynamic/services.yml   | 23 +++++++++++++++++++++++
 3 files changed, 30 insertions(+), 2 deletions(-)
 create mode 100644 apps/web-client/.env.local
 create mode 100644 infra/traefik/dynamic/services.yml

diff --git a/apps/web-client/.env.local b/apps/web-client/.env.local
new file mode 100644
index 00000000..043f2988
--- /dev/null
+++ b/apps/web-client/.env.local
@@ -0,0 +1,2 @@
+# Bypass Traefik due to Docker provider error
+NEXT_PUBLIC_API_URL=http://localhost/api/v1
diff --git a/deployments/local/docker-compose.yml b/deployments/local/docker-compose.yml
index 8492a47b..470836b8 100644
--- a/deployments/local/docker-compose.yml
+++ b/deployments/local/docker-compose.yml
@@ -48,12 +48,13 @@ services:
 
   # Traefik - API Gateway and Reverse Proxy
   traefik:
-    image: traefik:v2.10
+    image: traefik:v3.3
     container_name: traefik-local
     command:
       - "--api.insecure=true"
       - "--providers.docker=true"
       - "--providers.docker.exposedbydefault=false"
+      - "--providers.docker.network=goodgo-network"
       - "--providers.file.directory=/etc/traefik/dynamic"
       - "--providers.file.watch=true"
       - "--entrypoints.web.address=:80"
@@ -63,7 +64,9 @@ services:
       - "80:80"       # HTTP
       - "8080:8080"   # Dashboard
     volumes:
-      - /var/run/docker.sock:/var/run/docker.sock:ro
+      # EN: Use actual Docker Desktop socket path (not symlink)
+      # VI: Sử dụng đường dẫn socket thực của Docker Desktop (không phải symlink)
+      - ${HOME}/.docker/run/docker.sock:/var/run/docker.sock:ro
       - ../../infra/traefik:/etc/traefik:ro
     networks:
       - microservices-network
diff --git a/infra/traefik/dynamic/services.yml b/infra/traefik/dynamic/services.yml
new file mode 100644
index 00000000..d99b5703
--- /dev/null
+++ b/infra/traefik/dynamic/services.yml
@@ -0,0 +1,23 @@
+# EN: Static route configuration for IAM Service
+# VI: Cấu hình route tĩnh cho IAM Service
+# 
+# This file defines routes manually because Docker provider is not working
+# Đây là file định nghĩa routes thủ công vì Docker provider không hoạt động
+
+http:
+  routers:
+    iam-service:
+      rule: "PathPrefix(`/api/v1/auth`) || PathPrefix(`/api/v1/users`) || PathPrefix(`/api/v1/identity`) || PathPrefix(`/api/v1/access`) || PathPrefix(`/api/v1/governance`) || PathPrefix(`/api/v1/rbac`) || PathPrefix(`/api/v1/mfa`) || PathPrefix(`/api/v1/sessions`)"
+      service: iam-service
+      entryPoints:
+        - web
+
+  services:
+    iam-service:
+      loadBalancer:
+        servers:
+          - url: "http://iam-service:5001"
+        healthCheck:
+          path: "/health"
+          interval: "10s"
+          timeout: "3s"