Run traefik as dockeruser, and without host networking

This required port forwarding, a docker proxy, and a docker network, but the end result should be much more secure!

ansible/roles/traefik/tasks/main.yml

@@ -1,3 +1,9 @@
+- name: Create network
+  docker_network:
+    name: traefik
+    internal: true
+  become: true
+
 - name: Create install directory
   file:
     path: /opt/traefik
@@ -11,6 +17,7 @@
     path: /opt/traefik/traefik/
     state: directory
     mode: "{{ docker_compose_directory_mask }}"
+    owner: "{{ docker_user.name }}"
   become: true
 
 - name: Create file provider directory
@@ -18,6 +25,7 @@
     path: /opt/traefik/traefik/conf
     state: directory
     mode: "{{ docker_compose_directory_mask }}"
+    owner: "{{ docker_user.name }}"
   become: true
 
 - name: Install compose file