docker-compose-traefik-v3.yml

version: "3.3"
services:
  ######################################## Traefik ########################################
  traefik:
    image: traefik:${TRAEFIK_VERSION}
    container_name: "traefik"
    configs: 
      - source: traefik-conf
        target: /etc/traefik/traefik.yml
      - source: traefik-dyn
        target: /etc/traefik/dyn.yml
    networks: 
      - traefik-net
    secrets:
      - traefik-ssl-key
      - traefik-ssl-crt
    labels: 
      - "traefik.enable=true"
      - "traefik.http.routers.api.rule=Host(`traefik.hackinglab.local`)"
      - "traefik.http.routers.api.rule=PathPrefix(`/api`) || PathPrefix(`/dashboard`)"
      - "traefik.http.routers.api.service=api@internal"
      - "traefik.http.routers.api.tls=true"
    ports:
      - 80:80
      - 443:443
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
    deploy:
      resources:
        limits:
          cpus: '1'
          memory: 300M
        reservations:
          cpus: '0.25'
          memory: 20M
      restart_policy:
        condition: on-failure
        delay: 5s
        window: 120s
    
  ######################################## whomai ########################################
  whoami:
    image: "containous/whoami"
    container_name: "traefik-whoami"
    restart: unless-stopped
    networks: 
      - traefik-net
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.whoami.rule=Host(`whoami.hackinglab.local`)"
      - "traefik.http.routers.whoami.tls=true"
    deploy:
      resources:
        limits:
          cpus: '0.5'
          memory: 20M
        reservations:
          cpus: '0.1'
          memory: 10M
      restart_policy:
        condition: on-failure
        delay: 5s
        window: 120s

configs:
  traefik-conf:
    external: true
  traefik-dyn:
    external: true
  
networks: 
  traefik-net:
    driver: overlay
    attachable: true

secrets:
  traefik-ssl-key:
    external: true
  traefik-ssl-crt:
    external: true