version: "3.7"
services:
  traefik:
    image: "traefik:v2.8.3"
    container_name: "traefik"
    command:
      - "--log.level=ERROR"
      - "--api.insecure=true"
      - "--providers.docker=true"
      - "--providers.docker.exposedbydefault=false"
      - "--entrypoints.web.address=:80"
      - "--entrypoints.websecure.address=:443"
      - "--certificatesresolvers.godaddydnschallenge.acme.dnschallenge=true"
      - "--certificatesresolvers.godaddydnschallenge.acme.dnschallenge.provider=godaddy"
      - "--certificatesresolvers.godaddydnschallenge.acme.email=YOUR_EMAIL_HERE"
      - "--certificatesresolvers.godaddydnschallenge.acme.storage=/letsencrypt/acme.json"
      - "--certificatesresolvers.duckdnschallenge.acme.dnschallenge=true"
      - "--certificatesresolvers.duckdnschallenge.acme.dnschallenge.provider=duckdns"
      - "--certificatesresolvers.duckdnschallenge.acme.email=YOUR_EMAIL_HERE"
      - "--certificatesresolvers.duckdnschallenge.acme.storage=/letsencrypt/acme.json"
    environment:
      - DUCKDNS_TOKEN=YOUR_TOKEN_HERE
      - "GODADDY_API_KEY=YOUR_API_KEY_HERE"
      - "GODADDY_API_SECRET=YOUR_SECRET_HERE"
    labels:
      - "traefik.enable=true"
      - "traefik.http.middlewares.test-redirectscheme.redirectscheme.scheme=https"
      - "traefik.http.middlewares.test-redirectscheme.redirectscheme.permanent=true"
      - "traefik.http.middlewares.testHeader.headers.framedeny=true"
      - "traefik.http.middlewares.testHeader.headers.browserxssfilter=true"
      - "traefik.docker.network=homelab"
    ports:
      - "80:80"
      - "443:443"
      - "8484:8080"
    volumes:
      - "/var/run/docker.sock:/var/run/docker.sock:ro"
      - "PATH_ON_HOST_TO_LETSENCRYPT_FILES:/letsencrypt"
    networks:
      - homelab
    # Logging is optional. I'm using Loki
    # https://github.com/grafana/loki
    logging:
      driver: loki
      options:
        loki-url: "http://localhost:3002/loki/api/v1/push"
        loki-retries: "5"
        loki-batch-size: "400"
networks:
  homelab:
    external: true