docker-compose.yml

version: '3.6'
services:

  traefik:
    image: traefik:latest
    command: --logLevel=DEBUG --web --web.metrics.prometheus --web.metrics.prometheus.buckets="0.1,0.3,1.2,5.0" --docker --docker.swarmmode --docker.domain=lekh.net --docker.domain=vlekh.net --docker.watch --api
    deploy:
      mode: global
      placement:
        constraints:
          - "node.role == manager"
      update_config:
        parallelism: 1
        delay: 10s
      restart_policy:
        condition: on-failure
      labels:
        - traefik.enable=true
        - traefik.frontend.passHostHeader=true
        - traefik.frontend.rule=Host:traefik.vlekh.net
        - traefik.backend=traefik
        - traefik.docker.network=traefik
        - traefik.entryPoint=https
        - traefik.port=8080
    ports:
      - 8080:8080
      - 443:443
      - 80:80
    networks:
      - traefik
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    configs: 
      - source: traefik_config
        target: /etc/traefik/traefik.toml
    secrets:
      - source: traefik_traefik_lekh_cert
        target: /home/user/traefik/ssl/lekh_net.crt
      - source: traefik_traefik_lekh_key
        target: /home/user/traefik/ssl/server.key
      - source: traefik_traefik_vlekh_cert
        target: /home/user/traefik/ssl/vlekh.net.crt
      - source: traefik_traefik_vlekh_key
        target: /home/user/traefik/ssl/vlekh.net.key

networks:
  traefik:
    external: true
    name: traefik

configs:
  traefik_config:
    file: traefik.toml

secrets:
  traefik_traefik_lekh_cert:
    external: true
  traefik_traefik_lekh_key:
    external: true
  traefik_traefik_vlekh_cert:
    external: true
  traefik_traefik_vlekh_key:
    external: true