version: "3.9"

networks:
  proxy:
    external: true

secrets:
  hetzner:
    file: ./secrets/hetzner_key

services:
  traefik:
    image: traefik:2.8
    container_name: traefik
    restart: always
    secrets:
      - hetzner
    environment:
      - TZ=Europe/Berlin
      - HETZNER_API_KEY_FILE=/run/secrets/hetzner
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ./traefik/static.toml:/etc/traefik/traefik.toml
      - ./traefik/dynamic.toml:/dynamic.toml
      - ./secrets/acme.json:/acme.json
    ports:
      - "80:80"
      - "443:443"
      - "127.0.0.1:8080:8080"
    networks:
      - proxy