version: '3'

services:
  traefik:
    container_name: traefik
    image: traefik:1.7.12-alpine
    ports:
      - 80:80
      - 443:443
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - ./data:/etc/traefik
      - /var/log/traefik:/var/log/traefik
      - ./certs/acme.json:/acme.json
    labels:
      - "traefik.backend=traefik"
      - "traefik.docker.network=web"
      - "traefik.frontend.rule=Host:traefik.{{inventory_hostname}}.banditlair.com"
      - "traefik.enable=true"
      - "traefik.port=8080"
      - "traefik.default.protocol=http"
      - "traefik.frontend.auth.basic=admin:${TRAEFIK_DASHBOARD_PASSWORD_HASH}"
    networks:
      - web
    restart: always

  certdumper:
    image: ldez/traefik-certs-dumper:v2.4.1
    depends_on:
      - traefik
    restart: unless-stopped
    volumes:
      - ./certs:/traefik
    command: file --source /traefik/acme.json --dest /traefik/ssl --watch

networks:
  web:
    external: true