services:
  traefik:
    container_name: traefik
    image: docker.io/library/traefik:v3.4.4
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    secrets:
      - cf_api_token
    environment:
      CF_DNS_API_TOKEN_FILE: /run/secrets/cf_api_token
    volumes:
      - ${APPDATA_PATH}/traefik/data/traefik.yml:/traefik.yml:ro
      - ${APPDATA_PATH}/traefik/data/acme.json:/acme.json
      - /etc/localtime:/etc/localtime:ro
      - /var/run/docker.sock:/var/run/docker.sock:ro
    ports:
      - 80:80
      - 443:443
      - 443:443/udp
    networks:
      - frontend

networks:
  frontend:
    external: true

secrets:
  cf_api_token:
    file: ${APPDATA_PATH}/traefik/cf_api_token.txt