networks:
  proxy:
    external: true

volumes:
  acme:

services:
  traefik:
    image: traefik
    container_name: traefik
    restart: always
    environment:
      CF_DNS_API_TOKEN:
    networks:
      - proxy
    ports:
      - 80:80
      - 443:443
    labels:
      traefik.enable: true
      traefik.http.routers.dashboard.rule: Host(`traefik.4d6178.work`)
      traefik.http.routers.dashboard.service: api@internal
      traefik.http.routers.dashboard.entrypoints: websecure
      traefik.http.routers.dashboard.tls: true
      traefik.http.routers.dashboard.tls.certresolver: le
      traefik.http.routers.dashboard.middlewares: oidc-auth@file
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - acme:/acme
      - /opt/traefik/traefik.yaml:/etc/traefik/traefik.yaml
      - /opt/traefik/config.yaml:/etc/traefik/config.yaml