fix: Host-Port 8005 (8001 = LLM-Tunnel) + Mail-Secrets aus compose in .env

- Backend Host-Port 8001 -> 8005 (8001 reserviert fuer NucBox-LLM-Tunnel)
- IMAP/SMTP-Klartext-Passwoerter entfernt -> ${IMAP_*}/${SMTP_*} aus .env (gitignored)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

docker-compose.yml

@@ -1,5 +1,3 @@
-version: '3.8'
-
 services:
   backend:
     build:
@@ -7,22 +5,26 @@ services:
       dockerfile: Dockerfile.backend
     container_name: invoice-check-backend
     ports:
-      - "8001:8001"
+      - "127.0.0.1:8005:8001"  # Host 8005 (Projekt-Port) — 8001 belegt LLM-Tunnel
     environment:
       - DATABASE_URL=postgresql://postgres:postgres@db:5432/invoice_check
       - SECRET_KEY=${SECRET_KEY}
       - AWS_DEFAULT_REGION=eu-central-1
+      - IMAP_HOST=imap.strato.de
+      - IMAP_PORT=993
+      - IMAP_USER=${IMAP_USER}
+      - IMAP_PASSWORD=${IMAP_PASSWORD}
+      - SMTP_HOST=smtp.strato.de
+      - SMTP_PORT=587
+      - SMTP_USER=${SMTP_USER}
+      - SMTP_PASSWORD=${SMTP_PASSWORD}
     depends_on:
       - db
     networks:
-      - traefik_web
       - invoice-check-network
-    labels:
-      - "traefik.enable=true"
-      - "traefik.http.routers.invoice-check.entrypoints=websecure"
-      - "traefik.http.routers.invoice-check.rule=Host(`invoice-check.c-stone-dev.com`)"
-      - "traefik.http.routers.invoice-check.tls=true"
-      - "traefik.http.services.invoice-check.loadbalancer.server.port=8001"
+    volumes:
+      - ./backend/tests:/app/backend/tests
+      - /tmp/test-invoices:/tmp/test-invoices
 
   db:
     image: postgres:16-alpine
@@ -38,8 +40,6 @@ services:
     # Kein ports-Mapping - DB nur Docker-intern
 
 networks:
-  traefik_web:
-    external: true
   invoice-check-network:
     driver: bridge