# $Header: /home/springm/docker/traefik2/RCS/docker-compose.yml,v 1.2 2022/03/19 07:57:25 springm Exp springm $

# https://medium.com/@containeroo/traefik-2-0-docker-a-simple-step-by-step-guide-e0be0c17cfa5
# https://medium.com/@containeroo/traefik-2-0-docker-an-advanced-guide-d098b9e9be96

version: '3'

services:
  traefik:
    image: traefik:latest
    container_name: traefik
    restart: always 
    security_opt:
      - no-new-privileges:true
    networks:
      - proxy
    ports:
      - 80:80
      #- 993:993
      - 8080:8080
      - 443:443
      - 9999:9999
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ./traefik.yml:/traefik.yml:ro
      - ./shared/acme.json:/etc/traefik/acme/acme.json
      - ./config.yml:/config.yml:ro
      #- ./traefik-provider.toml:/traefik-provider.toml
      # extra Konfigurationen (für z. B. Middlewares)
      - ./providers:/providers
      - ./log:/var/log
    command:
      - --certresolv.myresolver.acme.storage=./shared/acme.json
    environment:
      - CLOUDFLARE_EMAIL=m.spring@gmx.de
      - CLOUDFLARE_API_KEY=8199b6b1054ca9d95f18df5a4e7a1abf0b232
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.traefik.entrypoints=http"
      - "traefik.http.routers.traefik.rule=Host(`traefik.markus-spring.de`)"
      - "traefik.http.middlewares.traefik-auth.basicauth.users=.......:$$............................"  
      - "traefik.http.middlewares.traefik-https-redirect.redirectscheme.scheme=https"
      - "traefik.http.routers.traefik.middlewares=traefik-https-redirect"
      - "traefik.http.routers.traefik-secure.entrypoints=https"
      - "traefik.http.routers.traefik-secure.rule=Host(`traefik.markus-spring.de`)"
      - "traefik.http.routers.traefik-secure.middlewares=traefik-auth"
      - "traefik.http.routers.traefik-secure.tls=true"
      - "traefik.http.routers.traefik-secure.tls.certresolver=cloudflare"
      - "traefik.http.routers.traefik-secure.tls.domains[0].main=markus-spring.de"
      - "traefik.http.routers.traefik-secure.tls.domains[0].sans=*.markus-spring.de"
      - "traefik.http.routers.traefik-secure.service=api@internal"
      
networks:
  proxy:
    external: true