Networking

Create one external Docker network that every application container joins. This keeps the reverse proxy decoupled from any individual app's compose stack.

docker network create gateway-net

Each service's own docker-compose.yml references it as external:

networks:
  gateway-net:
    external: true

No application container needs to publish a port to the host — only the reverse proxy binds 80/443.