services:
  traefik:
    image: traefik:latest
    container_name: traefik
    restart: always
    ports:
      - "443:443"
      - "8082:8082"
      - "2222:2222"
    networks:
      - traefik
    environment:
      - VARIOMEDIA_API_TOKEN=${VARIOMEDIA_API_TOKEN}  # Variomedia API key
      - TRAEFIK_METRICS_PROMETHEUS=true
      - TRAEFIK_METRICS_PROMETHEUS_ENTRYPOINT=metrics
      - TRAEFIK_METRICS_PROMETHEUS_ADDENTRYPOINTSLABELS=true
      - TRAEFIK_METRICS_PROMETHEUS_ADDSERVICESLABELS=true
      - TRAEFIK_METRICS_PROMETHEUS_MANUALROUTING=true
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ./traefik.yml:/etc/traefik/traefik.yml:ro
      - ./acme.json:/letsencrypt/acme.json
      - ./log:/var/log/traefik
    dns:
      - "10.20.1.1"
      - "10.20.0.1"
      - "1.1.1.1"  # Cloudflare DNS
networks:
  traefik:
    external: true