services:
  traefik:
    image: traefik:v3.5
    container_name: traefik
    restart: always
    ports:
      - 80:80 # (HTTP)
      - 443:443 # (HTTPS)
    command:
      - --providers.docker=true
      - --providers.docker.exposedByDefault=false
      - --certificatesresolvers.le-ssl.acme.email=${ACME_EMAIL}
      - --certificatesresolvers.le-ssl.acme.storage=acme.json
      - --certificatesresolvers.le-ssl.acme.httpchallenge.entrypoint=web
      - --tls.options.default.minVersion=VersionTLS12
      - --entrypoints.http.address=:80
      - --entrypoints.http.http.redirections.entryPoint.to=https
      - --entrypoints.http.http.redirections.entryPoint.scheme=https
      - --entrypoints.https.address=:443
      - --entrypoints.https.http.tls.certResolver=le-ssl
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /var/run/docker.sock:/var/run/docker.sock:ro
    networks:
      - default
      - front

networks:
  front:
    external: true