Portainer compose

version: "3.8"

services:
  portainer-agent:
    image: portainer/agent
    networks:
      - portainer-internal
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - /var/lib/docker/volumes:/var/lib/docker/volumes

  portainer:
    image: portainer/portainer-ce
    command: -H tcp://portainer-agent:9001 --tlsskipverify
    labels:
      - traefik.enable=true
      - traefik.constraint-label=cloud-public
      - traefik.http.routers.portainer.rule=Host(`dashboard.example.com`)
      - traefik.http.routers.portainer.entrypoints=websecure
      - traefik.http.routers.portainer.tls=true
      - traefik.http.routers.portainer.service=portainer
      - traefik.http.services.portainer.loadbalancer.server.port=9000
    networks:
      - cloud-public
      - portainer-internal
    volumes:
      - /data/portainer:/data

networks:
  portainer-internal:
  cloud-public:
    external: true