services:
  portainer:
    image: docker.io/portainer/portainer-ce:2.38.1-alpine
    restart: unless-stopped
    environment:
      - TZ=Europe/Berlin
    networks:
      - frontend
    ports:
      - "8000:8000"
    volumes:
      - /run/docker.sock:/var/run/docker.sock
      - portainer_data:/data
    labels:
      - traefik.enable=true
      - traefik.http.services.portainer_web.loadBalancer.server.port=9000
      - traefik.http.routers.portainer_https.service=portainer_web
      - traefik.http.routers.portainer_https.rule=Host(`portainer.home.sebastiangedigk.com`) || Host(`portainer.sebastiangedigk.com`)
      - traefik.http.routers.portainer_https.entrypoints=websecure
      - traefik.http.routers.portainer_https.tls=true
      - traefik.http.routers.portainer_https.tls.certresolver=cloudflare

volumes:
  portainer_data:
    driver: local

networks:
  frontend:
    external: true