version: '3'
services:
  traefik:
    image: traefik:v2.0
    container_name: traefik
    restart: unless-stopped
    command:
    - --log.level=DEBUG
    - --api.insecure=true
    - --providers.docker=true
    - --providers.docker.exposedbydefault=true
    - --entrypoints.websecure.address=:443
    - --certificatesresolvers.mytlschallenge.acme.tlschallenge=true
    - --certificatesresolvers.mytlschallenge.acme.caserver=https://acme-v02.api.letsencrypt.org/directory
    - --certificatesresolvers.mytlschallenge.acme.email=domein@domein.nl
    - --certificatesresolvers.mytlschallenge.acme.storage=/letsencrypt/acme.json
    security_opt:
      - no-new-privileges:true
    networks:
      - traefik
    ports:
      - 80:80
      - 443:443
      - 8181:8181
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ./letsencrypt:/letsencrypt
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.traefik.rule=Host(`www.domein.nl`,`domein.nl`)"
      - "traefik.http.routers.traefik.entrypoints=websecure"
      - "traefik.http.routers.traefik.tls.certresolver=mytlschallenge"

      #- "traefik.http.routers.traefik.entrypoints=http"
      #- "traefik.http.middlewares.traefik-https-redirect.redirectscheme.scheme=https"
      #- "traefik.http.routers.traefik.middlewares=traefik-https-redirect"

      #- "traefik.http.routers.traefik-secure.rule=Host(`www.domein.nl`,`domein.nl`)"
      #- "traefik.http.routers.traefik-secure.tls=true"
      #- "traefik.http.routers.traefik-secure.tls.certresolver=http"
      #- "traefik.http.routers.traefik-secure.service=api@internal"
      #- "traefik.http.services.traefik-api.loadbalancer.server.port=8181"#

  bazarr:
    image: linuxserver/bazarr
    container_name: bazarr
    restart: unless-stopped
    networks:
      - traefik
    environment:
      - PUID=1026
      - PGID=100
      - TZ=Europe/London
    volumes:
      - /volume1/docker/bazarr:/config
      - /volume1/media/Films:/movies
      - /volume1/media/Tv:/tv
    ports:
      - 6767:6767
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.bazarr.rule=Host(`bazarr.domein.nl`)"
      - "traefik.http.routers.bazarr.entrypoints=websecure"
      - "traefik.http.routers.bazarr.tls.certresolver=mytlschallenge"

networks:
  traefik:
    external: true