services:
  traefik:
    image: traefik:latest
    container_name: traefik
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    labels:
      - "com.ghost.tel/stack-type=prod"
    networks:
      - web
    ports:
      - 80:80
      - 443:443
      - 8080:8080
    environment:
      - TZ=America/New_York
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ./traefik.yml:/traefik.yml:ro
      - ./acme.json:/acme.json
      - ./conf.d/:/conf.d/
      - ./basicAuth:/basicAuth:ro
      - /var/log:/var/log

networks:
  web:
    external: true