services:
  traefik:
    image: ${TREFIK_IMAGE}
    container_name: ${TREFIK_CONTAINER_NAME}
    hostname: ${TREFIK_HOST_NAME}
    ports:
      - 443:443
    networks:
      - proxy
    restart: always
    logging:
      options:
        max-size: "50M"
        max-file: "3"    
    labels:
      - traefik.enable=true
      - traefik.http.routers.traefik-public-https.rule=Host(`${TRAEFIK_URL}`)
      - traefik.http.routers.traefik-public-https.entrypoints=https
      - traefik.http.routers.traefik-public-https.tls=true
      - traefik.http.routers.traefik-public-https.service=api@internal
      - traefik.http.services.traefik-public.loadbalancer.server.port=8080
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - /data/${CI_PROJECT_NAME}/traefik/traefik-public-certificates:/certificates
      - /data/${CI_PROJECT_NAME}/traefik/tmp:/tmp
    command:
      - --global.checkNewVersion=false
      - --serversTransport.insecureSkipVerify=true
      - --api.dashboard=true
      - --log.level=DEBUG
      - --log.filePath=/tmp/traefik.log
      - --log.maxSize=10
      - --log.maxBackups=2
      - --log.maxAge=1
      - --log.compress=true
      - --accesslog.addInternals=true
      - --accesslog.filePath=/tmp/access.log
      - --accesslog.bufferingSize=1000
      - --providers.docker=true
      - --providers.docker.exposedbydefault=false
      - --providers.docker.endpoint=unix:///var/run/docker.sock
      - --entryPoints.https.address=:443
      - --entryPoints.https.transport.respondingTimeouts.readTimeout=0s
      - --entryPoints.https.http.encodeQuerySemicolons=true
networks:
  proxy:
    name: proxy
    external: true