version: "3.8"

networks:
  default:
    driver: bridge

services:
  traefik:
    ports:
      - target: 443
        published: 443
        protocol: tcp
        mode: host
    command:
      - --providers.file.filename=/traefik/dynamic_conf.toml

      - --entrypoints.websecure.address=:443

      - --certificatesresolvers.letsencrypt.acme.httpchallenge=true
      - --certificatesresolvers.letsencrypt.acme.httpchallenge.entrypoint=web
      - --certificatesresolvers.letsencrypt.acme.email=${TRAEFIK_EMAIL}
      - --certificatesresolvers.letsencrypt.acme.storage=/traefik/acme.json
    labels:
        traefik.http.routers.traefik.entrypoints: 'websecure'
        traefik.http.routers.traefik.tls.certResolver: 'letsencrypt'
        traefik.http.routers.traefik.priority: '2000'