feat: cert TLS automatique via acme-companion + route HTTPS Fabio

- Ajout label LETSENCRYPT_HOST sur le container prestashop :
  sonic-acme-1 (acme-companion) emet le cert et le copie dans /host/certs/
  Fabio le detecte par SNI sans redemarrage
- Route Fabio KV mise a jour : HTTP et HTTPS (domain:443) en une seule cle

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.woodpecker.yml

@@ -79,9 +79,10 @@ steps:
         docker exec sonic-consul env CONSUL_HTTP_TOKEN="$CTOK" consul services register \
           -address "$CONTAINER_IP" -port 80 -name prestashop -tag "urlprefix-$DOMAIN/"
         echo "Consul: prestashop -> $CONTAINER_IP:80 urlprefix-$DOMAIN/"
-        docker exec sonic-consul env CONSUL_HTTP_TOKEN="$CTOK" consul kv put fabio/config \
-          "route add prestashop $DOMAIN/ http://$CONTAINER_IP:80/"
-        echo "Fabio KV: route add prestashop $DOMAIN/ -> $CONTAINER_IP:80"
+        ROUTES="route add prestashop $DOMAIN/ http://$CONTAINER_IP:80/
+route add prestashop $DOMAIN:443/ http://$CONTAINER_IP:80/"
+        docker exec sonic-consul env CONSUL_HTTP_TOKEN="$CTOK" consul kv put fabio/config "$ROUTES"
+        echo "Fabio KV: routes HTTP+HTTPS $DOMAIN -> $CONTAINER_IP:80"
 
   # Etape 4 : Healthcheck post-deploiement
   - name: healthcheck

docker-compose.yml

@@ -28,6 +28,9 @@ services:
       SERVICE_NAME: "prestashop"
       SERVICE_80_NAME: "prestashop"
       SERVICE_80_TAGS: "urlprefix-${PS_DOMAIN}/"
+      # sonic-acme-1 (acme-companion) emet le cert TLS et le copie dans /host/certs/
+      # Fabio le detecte automatiquement par SNI pour HTTPS
+      LETSENCRYPT_HOST: "${PS_DOMAIN}"
     networks:
       - prestashop-net
       # Reseau "sonic" requis pour que Registrator trouve l'IP du conteneur