docker-compose (traefik/HA)

version: "3.7"
services:
  traefik:
    hostname: traefik
    image: traefik:latest
    container_name: traefik
    restart: always
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ${USERDIR}/traefik/traefik.yml:/etc/traefik/traefik.yml:ro
      - ${USERDIR}/traefik/rules.yml:/etc/traefik/rules.yml:ro
      - ${USERDIR}/traefik/acme:/etc/traefik/acme
      - ${USERDIR}/shared:/shared
      - ${USERDIR}/traefik/log:/var/log
    command:
      - --providers.docker=true
      - --api.insecure=true
      - --certificatesresolvers.letsencrypt.acme.email=${CLOUDFLARE_EMAIL}
      - --certificatesresolvers.letsencrypt.acme.storage=/etc/traefik/acme/acme.json
      - --certificatesresolvers.letsencrypt.acme.tlschallenge=true
      - --log.level=DEBUG
      - --providers.docker.exposedbydefault=false
      - --entrypoints.http.address=:80
      - --entrypoints.https.address=:443
    ports:
      - 80:80
      - 443:443
    networks:
      - default
      - traefik_proxy
    environment:
      - CF_API_EMAIL=${CLOUDFLARE_EMAIL}
      - CF_API_KEY=${CLOUDFLARE_API_KEY}
    labels:
      - traefik.docker.network=traefik_proxy

  homeassistant:
    hostname: homeassistant
    container_name: homeassistant
    ports:
    - 8123:8123
    environment:
    - PUID=1000
    - PGID=1000
    networks:
      - default
      - traefik_proxy
    image: homeassistant/home-assistant:stable
    volumes:
      - ${USERDIR}/homeassistant:/config
    environment:
      - TZ=${TZ}
    restart: always
    labels:
      traefik.enable: true
      traefik.http.routers.homeassistant.rule: Host(`ha.${DOMAINNAME}`)
      traefik.http.routers.homeassistant.entrypoints: http
      traefik.http.routers.homeassistant.entrypoints: https
      traefik.http.routers.homeassistant.tls.certresolver: https
      traefik.http.routers.homeassistant.middlewares: redirect
      traefik.http.middlewares.redirect.redirectscheme.scheme: https
      traefik.http.middlewares.homeassistant.headers.SSLRedirect: true
      traefik.http.middlewares.homeassistant.headers.STSSeconds: 315360000
      traefik.http.middlewares.homeassistant.headers.browserXSSFilter: true
      traefik.http.middlewares.homeassistant.headers.contentTypeNosniff: true
      traefik.http.middlewares.homeassistant.headers.SSLHost: (`ha.${DOMAINNAME}`)
      traefik.http.middlewares.homeassistant.headers.forceSTSHeader: true
      traefik.http.middlewares.homeassistant.headers.STSIncludeSubdomains: true
      traefik.http.middlewares.homeassistant.headers.STSPreload: true
      traefik.http.middlewares.homeassistant.headers.frameDeny: true
      traefik.http.services.homeassistant.loadbalancer.server.port: 8123
      traefik.port: 8123
      traefik.docker.network: traefik_proxy

networks:
  traefik_proxy:
    external:
      name: traefik_proxy
  default:
    driver: bridge