swarmandtraefik

version: "3.7"

volumes:
  portainer_data:
    driver_opts:
      type: "nfs"
      o: "addr=nfshost,nolock,soft,rw"
      device: ":/vol/vol/appdata/portainer-data/test"
  traefik_config:
    driver_opts:
      type: "nfs"
      o: "addr=nfshost,nolock,soft,rw"
      device: ":/vol/vol/appdata/traefik-config/test"
  traefick_data:
    driver_opts:
      type: "nfs"
      o: "addr=nfshost,nolock,soft,rw"
      device: ":/vol/vol/appdata/traefik-data/test"

networks:
  traefiknet:
    external: True
  portainer_agent_network:
    external: True

services:
  traefik:
    image: traefik:v2.7.0
    network_mode: host
    networks:
      - traefiknet
    ports:
      - target: 80
        published: 80
        protocol: tcp
        mode: host
      - target: 443
        published: 443
        protocol: tcp
        mode: host
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - traefik_config:/etc/traefik:ro
      - traefick_data:/data
      - /etc/ssl/star_example_org.crt:/etc/ssl/star_example_org.crt
      - /etc/ssl/star_example_org.key:/etc/ssl/star_example_org.key
    deploy:
      mode: global
      placement:
        constraints:
          - node.role == manager
      labels:
        traefik.enable: "true"
        traefik.docker.network: traefiknet
        traefik.http.routers.traefikroute.entrypoints: "websecure"
        traefik.http.routers.traefikroute.rule: "Host(`testtraefik.example.org`)"# && (PathPrefix(`/api/`) || PathPrefix(`/dashboard/`))"
        traefik.http.routers.traefikroute.middlewares: "user-auth@file"
        traefik.http.routers.traefikroute.service: "api@internal"
        traefik.http.services.traefik.loadbalancer.server.port: 80

  portainer:
    image: portainer/portainer-ce:2.13.1-alpine
    networks:
      - traefiknet
      - portainer_agent_network
    ports:
#      - target: 8000
#        published: 8000
#        protocol: tcp
#      - target: 9443
#        published: 9443
#        protocol: tcp
      - target: 9000
        published: 9000
        protocol: tcp
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - portainer_data:/data
    deploy:
      placement:
        constraints:
          - node.role == manager
      labels:
        traefik.enable: "true"
        traefik.docker.network: traefiknet
        traefik.http.routers.portainerroute.entrypoints: "websecure"
        traefik.http.routers.portainerroute.rule: "Host(`testportainer.example.org`)"
        traefik.http.routers.portainerroute.service: "portainer"
        traefik.http.services.portainer.loadbalancer.server.port: 9000