### networks
networks:
  back_network:
    driver: bridge
    attachable: true
  front_network:
    driver: bridge
    attachable: true

### Volumes
#volumes:
#  traefik-logs:

### services
services:
# traefik
  traefik:
    container_name: traefik-app
    hostname: traefik-app
    image: traefik:latest
    restart: always
    ports:
#      - "22:22"
      - "80:80"
      - "443:443"
      - "8181:8181"
    volumes:
      - "/var/run/docker.sock:/var/run/docker.sock:ro"
      - "/etc/localtime:/etc/localtime:ro"
      - "./configs/traefik.yml:/etc/traefik/traefik.yml"
      - "./configs/dynamic:/etc/traefik/dynamic:rw"
#      - "./certificates/acme.json:/etc/traefik/acme/acme.json:rw"
      - "./certificates:/var/traefik/certs:rw"
      - "./certificates:/etc/traefik/ssl:rw"
      - "./logs:/var/log/traefik:rw"
    environment:
      - CF_DNS_API_TOKEN=${CF_DNS_API_TOKEN}
      - CLOUDFLARE_DNS_API_TOKEN_FILE=/run/secrets/cf_token
      - CLOUDFLARE_HTTP_TIMEOUT=${HTTP_TIMEOUT}
      - CLOUDFLARE_POLLING_INTERVAL=${POLLING_INTERVAL}
      - CLOUDFLARE_PROPAGATION_TIMEOUT=${PROPAGATION_TIMEOUT}
      - CLOUDFLARE_TTL=${TTL}
# Swarm config
#    deploy:
#      restart_policy:
#        condition: any
#        delay: 5s
#        max_attempts: 3
#        window: 120s
#      update_config:
#        delay: 10s
#        order: start-first
#        parallelism: 1
#      rollback_config:
#        parallelism: 0
#        order: stop-first
#      placement:
#        constraints:
#          - node.role == manager
    networks:
      - back_network
      - front_network

### Certificats
  certificat:
    container_name: traefik-certificat
    hostname: traefik-certificat
    image: alpine:latest
    command: sh -c "cd /etc/traefik/ssl
      && wget traefik.me/cert.pem -O cert2.pem
      && wget traefik.me/privkey.pem -O privkey2.pem"
    volumes:
      - "./certificates:/etc/traefik/ssl"
    networks:
      - front_network

### whoami
  whoami:
    container_name: traefik-whoami
    hostname: traefik-whoami
    image: traefik/whoami:latest
    command:
       - --name=externe
    restart: unless-stopped
    networks:
      - front_network
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=front_network"
# HTTP
      - "traefik.http.routers.whoami-http.rule=Host(`whoami.tips-of-mine.com`)"
      - "traefik.http.routers.whoami-http.entrypoints=http"
# HTTPS
      - "traefik.http.routers.whoami-https.rule=Host(`whoami.tips-of-mine.com`)"
      - "traefik.http.routers.whoami-https.entrypoints=https"
      - "traefik.http.routers.whoami-https.tls=true"
      - "traefik.http.routers.whoami-https.service=whoami-service"
# Middleware
# Service
      - "traefik.http.services.whoami-service.loadbalancer.server.port=80"