services:
  traefik:
    image: traefik:latest
    command:
      - "--configFile=/etc/traefik/traefik.yml"
    ports:
      - "80:80"
      - "443:443"
    networks:
      - cicd
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ./config.yml:/etc/traefik/traefik.yml:ro
      - ./dynamic.yml:/etc/traefik/dynamic.yml:ro
      - ./sendico.json:/sendico.json
      - traefik_letsencrypt:/letsencrypt
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=cicd"
      - "traefik.http.routers.traefik.rule=Host(`traefik.sendico.io`)"
      - "traefik.http.routers.traefik.entrypoints=websecure"
      - "traefik.http.routers.traefik.tls.certresolver=letsencrypt"
      - "traefik.http.routers.traefik.service=api@internal"
      - "traefik.http.routers.traefik.middlewares=secure-headers@file,dashboard-auth@file"

  mail-cert-proxy:
    image: traefik/whoami
    networks:
      - cicd
    deploy:
      labels:
        - "traefik.enable=true"
        - "traefik.http.routers.mail-cert.rule=Host(`mail.sendico.io`)"
        - "traefik.http.routers.mail-cert.entrypoints=websecure"
        - "traefik.http.routers.mail-cert.tls.certresolver=letsencrypt"
        - "traefik.http.services.mail-cert.loadbalancer.server.port=80"

networks:
  cicd:
    external: true

volumes:
  traefik_letsencrypt: