version: '3.8'

networks:
  interne:
    driver: overlay
    attachable: true
  externe:
    driver: bridge
    attachable: true

services:
# traefik
  traefik:
    container_name: traefik-app
    hostname: traefik-app
    image: traefik:latest
    restart: always
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - "/var/run/docker.sock:/var/run/docker.sock:ro"
      - "./configs/traefik.yml:/etc/traefik/traefik.yml"
      - "./configs/dynamic:/etc/traefik/dynamic"
      - "./certificates/acme.json:/etc/traefik/acme/acme.json"
      - "./certificates:/etc/traefik/ssl"
      - "./traefik/log:/var/log"
      - "./traefik:/etc/traefik"
    networks:
      - interne
      - externe

# Certificats
  reverse-proxy-https-helper:
    container_name: traefik-certificat
    image: alpine
    command: sh -c "cd /etc/traefik/ssl
      && wget traefik.me/cert.pem -O cert.pem
      && wget traefik.me/privkey.pem -O privkey.pem"
    volumes:
      - "./certificates:/etc/traefik/ssl"
    networks:
      - interne
      - externe

# whoami
  whoami:
    container_name: whoami
    hostname: whoami
    image: traefik/whoami
    restart: unless-stopped
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=interne"
# HTTP
      - "traefik.http.routers.whoami-http.rule=Host(`whoami.10.0.4.29.traefik.me`)"
      - "traefik.http.routers.whoami-http.entrypoints=http"
# HTTPS
      - "traefik.http.routers.whoami-https.rule=Host(`whoami.10.0.4.29.traefik.me`)"
      - "traefik.http.routers.whoami-https.entrypoints=https"
      - "traefik.http.routers.whoami.tls=true"
# Middleware
# Service
    networks:
      - interne