Traefik on QNAP

services:

  traefik:
    image: traefik:3.1
    container_name: traefik
    restart: unless-stopped

    networks:
      traefik_vlan:
        ipv4_address: 172.16.50.2
      backend_net: {}

    volumes:
      - /share/CACHEDEV1_DATA/traefik/config:/etc/traefik
      - /share/CACHEDEV1_DATA/traefik/acme:/acme

    environment:
      - CF_DNS_API_TOKEN=Password1

    command:
      # EntryPoints
      - "--entrypoints.web.address=:8880"
      - "--entrypoints.websecure.address=:8843"
      - "--entrypoints.dashboard.address=:8181"

      # Dashboard + API
      - "--api=true"
      - "--api.dashboard=true"
      - "--api.dashboard.entrypoint=dashboard"
      - "--api.insecure=false"

      # File provider only (QNAP-safe)
      - "--providers.file.directory=/etc/traefik/conf"
      - "--providers.file.watch=true"

      # ACME DNS challenge (Cloudflare)
      - "[email protected]"
      - "--certificatesresolvers.le.acme.storage=/acme/acme.json"
      - "--certificatesresolvers.le.acme.dnschallenge.provider=cloudflare"
      - "--certificatesresolvers.le.acme.dnschallenge.delaybeforecheck=0"

    ports:
      - "8880:8880"
      - "8843:8843"
      - "8181:8181"


  mariadb:
    image: mariadb:11
    container_name: mariadb
    restart: unless-stopped

    environment:
      MYSQL_ROOT_PASSWORD: Pass
      MYSQL_DATABASE: observium
      MYSQL_USER: observium
      MYSQL_PASSWORD: Password1

    volumes:
      - /share/CACHEDEV1_DATA/mariadb/data:/var/lib/mysql

    networks:
      backend_net:


  observium:
    image: uberchuckie/observium:latest
    container_name: observium
    restart: unless-stopped

    environment:
      TZ: America/Toronto

    volumes:
      - /share/CACHEDEV1_DATA/observium/html:/opt/observium/html
      - /share/CACHEDEV1_DATA/observium/logs:/opt/observium/logs
      - /share/CACHEDEV1_DATA/observium/rrd:/opt/observium/rrd

    networks:
      backend_net:

    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.observium.rule=Host(`observium.myite.net`)"
      - "traefik.http.routers.observium.entrypoints=websecure"
      - "traefik.http.routers.observium.tls.certresolver=le"
      - "traefik.http.services.observium.loadbalancer.server.port=8668"


  phpmyadmin:
    image: phpmyadmin:latest
    container_name: phpmyadmin
    restart: unless-stopped

    environment:
      PMA_HOST: mariadb
      PMA_USER: root
      PMA_PASSWORD: password1

    networks:
      backend_net:
      traefik_vlan:
        ipv4_address: 172.16.50.20

    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.pma.rule=PathPrefix(`/phpmyadmin`)"
      - "traefik.http.routers.pma.entrypoints=dashboard"
      - "traefik.http.services.pma.loadbalancer.server.port=80"
      - "traefik.http.middlewares.pma-strip.stripPrefix.prefixes=/phpmyadmin"
      - "traefik.http.routers.pma.middlewares=pma-strip"


networks:

  traefik_vlan:
    external: true

  backend_net:
    driver: bridge