Working Traefik 2.X Example

version: '3.8'

x-default-opts:
  &default-opts
  logging:
    options:
      max-size: "1m"

services:
  proxy:
    <<: *default-opts
    depends_on:
      - dockersocket
    image: traefik:latest
    volumes:
      - /local/path/to/logs:/logs
    environment:
      TZ: "US/New York"
    command:
      - "--providers.docker"
      - "--providers.docker.exposedByDefault=false"
      - "--providers.docker.endpoint=tcp://dockersocket:2375"
      - "--providers.docker.swarmMode=true"
      - "--providers.docker.network=traefik-public"

      - "--log=true"
      - "--log.filePath=/logs/traefik.log"
      - "--log.level=ERROR"
      - "--accesslog=true"
      - "--accesslog.filepath=/logs/access.log"
      - "--accesslog.bufferingsize=25"
      - "--api=true"
      - "--api.dashboard=true"
      - "--api.insecure=true"

      - "--entryPoints.http.address=:80"
      - "--entryPoints.https.address=:443"

    ports:
      - target: 80
        published: 80
        protocol: tcp
        mode: host
      - target: 443
        published: 443
        protocol: tcp
        mode: host

    deploy:
      mode: global
      placement:
        constraints:
          - "node.role==manager"
      labels:
        traefik.enable: "true"
        traefik.http.routers.api.entrypoints: "http"
        traefik.http.routers.api.rule: "Host(`*`) && (PathPrefix(`/dashboard`) || PathPrefix(`/api`))"
        traefik.http.routers.api.service: "api@internal"
        traefik.http.services.api.loadbalancer.server.port: "8080"
    networks:
      - traefik-socket
      - traefik-public

  dockersocket:
    <<: *default-opts
    image: tecnativa/docker-socket-proxy
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    environment:
      CONTAINERS: 1
      NETWORKS: 1
      SERVICES: 1
      SWARM: 1
      TASKS: 1
    deploy:
      mode: global
      placement:
        constraints:
          - "node.role==manager"
    networks:
      - traefik-socket

networks:
  traefik-public:
    external: true
  traefik-socket:
    driver: overlay
    driver_opts:
      encrypted: 'true'