services:
    traefik:
        image: "traefik"
        container_name: traefik
        restart: always
        command:
            - "--api=true"
            - "--api.insecure=true"
            - "--providers.docker=true"
            - "--providers.docker.exposedbydefault=false"
            - "--entrypoints.web.address=:80"
            - "--entrypoints.web.http.redirections.entryPoint.to=websecure"
            - "--entrypoints.web.http.redirections.entrypoint.scheme=https"
            - "--entrypoints.websecure.address=:443"
            - "--certificatesresolvers.myresolver.acme.httpchallenge=true"
            - "--certificatesresolvers.myresolver.acme.httpchallenge.entrypoint=web"
            - "--certificatesresolvers.myresolver.acme.email=${SSL_EMAIL}"
            - "--certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json"
            - "--providers.file.directory=/config"
            - "--providers.file.watch=true"
        ports:
            - "80:80"
            - "443:443"
        volumes:
            - traefik_data:/letsencrypt
            - /var/run/docker.sock:/var/run/docker.sock:ro
            - /mnt/synology_drive:/mnt/synology_drive:rw
            - ./traefik-config:/config:ro
        networks:
            - proxy

networks:
    proxy:
        name: traefik_proxy
        external: true

volumes:
    traefik_data: