---
version: "3"
services:
  traefik:
    container_name: traefik
    image: traefik:1.7
    command:
      - "--api"
      - "--entryPoints=Name:http Address::80 Redirect.EntryPoint:https"
      - "--entryPoints=Name:https Address::443 TLS"
      - "--defaultentrypoints=http,https"
      - "--acme"
      - "--acme.storage=/etc/traefik/acme/acme.json"
      - "--acme.entryPoint=https"
      - "--acme.httpChallenge.entryPoint=http"
      - "--acme.caServer=https://acme-v02.api.letsencrypt.org/directory"
      - "--acme.onHostRule=true"
      - "--acme.onDemand=false"
      - "--acme.email=kleinmaddin@googlemail.com"
      - "--acme.acmelogging=true"
      - "--docker"
#      - "--docker.watch"
      - "--logLevel=INFO"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - /etc/traefik/acme/acme.json:/etc/traefik/acme/acme.json
      - /etc/traefik:/etc/traefik
      - ./logs:/var/log/traefik
    networks:
      - traefik
    ports:
      - "80:80"
      - "443:443"
    labels:
      traefik.frontend.rule: "Host:traefik.eichner.cc"
      traefik.port: "8080"
      traefik.frontend.auth.forward.address: "http://89.58.15.160:5252"
      traefik.frontend.auth.forward.authResponseHeaders: "cookie"
      traefik.backend: "traefik"
      traefik.frontend.entryPoints: "https"
#      traefik.frontend.auth.basic.users: "admin:$$apr1$S0AMFtfZ$yMnkgnpJzsG3JRAO2EXQ1/"
      traefik.frontend.auth.basic.usersFile: "/etc/traefik/.htpasswd"
    restart: unless-stopped

networks:
  traefik:
    external:
      name: traefik


root@eichner:/opt/docker# cat vaultwarden/docker-compose.yml
version: '3'

services:
  bitwarden:
    container_name: bitwarden
    image: vaultwarden/server:latest
    env_file: .env
    networks:
      - traefik
    labels:
      - "traefik.frontend.rule=Host:vault.eichner.cc"
      - "traefik.port=80"
      - "traefik.backend=bitwarden"
      - "traefik.frontend.entryPoints=https"
    volumes:
        - "/var/run/docker.sock:/var/run/docker.sock"
        - "./data:/data"
    restart: unless-stopped

networks:
  traefik:
    external:
      name: traefik