---
version: "3.8"

networks:
  forge:
    name: "forge-flow"
    ipam:
      driver: "default"
      config:
      - subnet: "${NETWORK_FORGE_FLOW_SUBNET}"

volumes:
  traefik-shared:
    name: "traefik-config-shared-volume"

services:
  traefik:
    container_name: "traefik-flow"
    build:
      args:
        TRAEFIK_VERSION: "${TRAEFIK_VERSION}"
      context: "./traefik"
    networks:
      forge:
        ipv4_address: "${TRAEFIK_CONTAINER_IPV4_ADDRESS}"
    ports:
    - target: 80
      published: 80
      protocol: "tcp"
      mode: "host"
    - target: 443
      published: 443
      protocol: "tcp"
      mode: "host"
    - target: 22
      published: ${TRAEFIK_EXTERNAL_SSH_PORT}
      protocol: "tcp"
      mode: "host"
    restart: "always"
    volumes:
    - type: "volume"
      source: "traefik-shared"
      target: "${TRAEFIK_SHARED_MOUNT_POINT}"
    - type: "bind"
      source: "/etc/timezone"
      target: "/etc/timezone"
      read_only: true
    - type: "bind"
      source: "/etc/localtime"
      target: "/etc/localtime"
      read_only: true
    # For TLS certificate
    #- type: "bind"
    #  source: ""
    #  target: ""