vikunja docker-compose

version: '3'

services:
  api:
    image: vikunja/api
    environment:
      VIKUNJA_DATABASE_HOST: db
      VIKUNJA_DATABASE_PASSWORD: supersecret
      VIKUNJA_DATABASE_TYPE: mysql
      VIKUNJA_DATABASE_USER: vikunja
      VIKUNJA_DATABASE_DATABASE: vikunja
    volumes:
      - /var/lib/vikunja/files:/app/vikunja/files
    networks:
      - proxy
      - backend
    depends_on:
      - db
    restart: unless-stopped
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.vikunja-api.rule=HostHeader(`vikunja.contoso.com`) && PathPrefix(`/api/v1`, `/dav/`, `/.well-known/`)"
      - "traefik.http.routers.vikunja-api.rule=Host(`vikunja.contoso.com`) && PathPrefix(`/api/v1`, `/dav/`, `/.well-known/`)"
      - "traefik.http.routers.vikunja-api.entrypoints=https"
      - "traefik.http.routers.vikunja-api.tls=true"
      - "traefik.http.routers.vikunja-api.tls.certResolver=http"

      - "com.centurylinklabs.watchtower.enable=true"
  frontend:
    image: vikunja/frontend
    labels:
      - "traefik.enable=true"

      # Accept HTTP and upgrade to HTTPS
      - "traefik.http.routers.vikunja.entrypoints=http"
      - "traefik.http.routers.vikunja.rule=HostHeader(`vikunja.contoso.com`)"
      - "traefik.http.routers.vikunja.rule=Host(`vikunja.contoso.com`)"
      - "traefik.http.middlewares.vikunja-https-redirect.redirectscheme.scheme=https"
      - "traefik.http.routers.vikunja.middlewares=vikunja-https-redirect"

      # Define secure entry point
      - "traefik.http.routers.vikunja-secure.entrypoints=https"
      - "traefik.http.routers.vikunja-secure.rule=HostHeader(`vikunja.contoso.com`)"
      - "traefik.http.routers.vikunja-secure.rule=Host(`vikunja.contoso.com`)"
      - "traefik.http.routers.vikunja-secure.tls=true"
      - "traefik.http.routers.vikunja-secure.tls.certresolver=http"

      # Attach this container to the reverse proxy network.
      - "traefik.docker.network=proxy"

      - "com.centurylinklabs.watchtower.enable=true"
    networks:
      - proxy
      - backend
    restart: unless-stopped
  db:
    networks:
      - backend
    image: mariadb:10
    command: --character-set-server=utf8mb4 --collation-server=utf8mb4_unicode_ci --max-connections=1000
    environment:
      MYSQL_ROOT_PASSWORD: supersupersecret
      MYSQL_USER: vikunja
      MYSQL_PASSWORD: supersecret
      MYSQL_DATABASE: vikunja
    volumes:
      - /var/lib/vikunja/db:/var/lib/mysql
    restart: unless-stopped
    labels:
      - "com.centurylinklabs.watchtower.enable=true"
networks:
  proxy:
    external: true
  backend: