docker-compose.yml

version: '2.4'

services:
    reverse-proxy:
        container_name: reverse-proxy
        # The official v2.2 Traefik docker image
        image: traefik:v2.2
        command:
            - "--global.sendanonymoususage=false"
            - "--api.dashboard=true"
            - "--entrypoints.web.address=:80"
            - "--entrypoints.websecure.address=:443"
            - "--entrypoints.mqtt.address=:1883"
            - "--entrypoints.mysql.address=:3306"
            - "--entrypoints.phosconws.address=:8443"
            - "--providers.docker=true"
            - "--providers.docker.exposedbydefault=false"
            - "--providers.docker.network=traefik_proxy"
            - "--providers.file=true"
            - "--providers.file.filename=/etc/traefik/providers-config.toml"
            - "--certificatesresolvers.le=true"
            - "--certificatesresolvers.le.acme.email=${LETSENCRYPT_ACME_EMAIL}"
            - "--certificatesresolvers.le.acme.storage=/etc/traefik/ssl/acme.json"
            - "--certificatesresolvers.le.acme.httpchallenge=true"
            - "--certificatesresolvers.le.acme.httpchallenge.entrypoint=web"
        restart: always
        environment:
            ACME_EMAIL: "${LETSENCRYPT_ACME_EMAIL}"
            ADDRESS: "192.168.11.10"
            HA_DOMAIN_NAME: "${EXTERNAL_DOMAIN}"
            LAN_DOMAIN_NAME: "${INTERNAL_DOMAIN}"
        networks:
            - traefik_proxy
        extra_hosts: 
            - host.docker.internal:172.17.0.1
        ports:
            - 80:80
            - 443:443
            # - 1883:1883 # mosquito
            # - 3306:3306 # mysql
            # - 8443:8443 # phoscon deconz
        volumes:
            # So that Traefik can listen to the Docker events
            - /var/run/docker.sock:/var/run/docker.sock:ro
            - ${PERSIST_DATA_PATH}/data/traefik-config:/etc/traefik
        labels:
            - "traefik.enable=true"
            - "traefik.http.routers.dashboard.rule=Host(`traefik.${INTERNAL_DOMAIN}`)"
            - "traefik.http.routers.dashboard.entrypoints=web"
            - "traefik.http.routers.dashboard.service=api@internal"
        logging:
            options:
                max-size: 10m
    
    portainer:
        container_name: portainer
        image: portainer/portainer:1.24.0
        restart: always
        networks:
            - traefik_proxy
        volumes:
            - /var/run/docker.sock:/var/run/docker.sock
            - ./data/portainer-data:/data
        labels:
            - "traefik.enable=true"
            - "traefik.http.routers.portainer.rule=Host(`portainer.${INTERNAL_DOMAIN}`)"
            - "traefik.http.routers.portainer.entrypoints=web"
            - "traefik.http.routers.portainer.service=portainer"
            - "traefik.http.services.portainer.loadbalancer.server.port=9000"
        logging:
            options:
                max-size: 10m

    # dyndns:
    #     container_name: dyndns
    #     image: oznu/cloudflare-ddns:latest
    #     restart: always
    #     networks:
    #         - host_applications
    #     environment:
    #         API_KEY: "${CLOUDFLARE_API_KEY}"
    #         ZONE: "${DYNDNS_ZONE}"
    #         SUBDOMAIN: "${DYNDNS_SUBDOMAIN}"


networks:
    # host_applications:
    #     name: applications
    #     driver: bridge
    #     ipam:
    #         config:
    #             - subnet: 172.18.0.0/24
    #               gateway: 172.18.0.1
    traefik_proxy:
        name: traefik_proxy
        driver: bridge
        ipam:
            config:
                - subnet: 172.24.0.0/16
                  gateway: 172.24.0.1