version: '3.8'

services:
  #Status Page ()
  status:
    image: louislam/uptime-kuma:latest
    container_name: status
    volumes:
      - ./uptime-kuma/data:/app/data
    networks:
      - proxy
    labels:
      ## Expose uptime-kuma Through Trefik ##
      - "traefik.enable=true" # <== Enable traefik to proxy this container
      
      - "traefik.http.middlewares.redirect-web-secure.redirectscheme.scheme=https"
      - "traefik.http.routers.status-insecure.middlewares=redirect-web-secure"
      - "traefik.http.routers.status-insecure.rule=Host(`status.luke-else.co.uk`)"
      - "traefik.http.routers.status-insecure.entrypoints=web"

      - "traefik.http.routers.status.rule=Host(`status.luke-else.co.uk`)"
      - "traefik.http.routers.status.entrypoints=websecure"
      - "traefik.http.routers.status.tls.certresolver=myresolver"
    restart: unless-stopped

  portainer:
      image: portainer/portainer-ce:latest
      container_name: portainer
      security_opt:
        - no-new-privileges:true
      volumes:
        - /etc/localtime:/etc/localtime:ro
        - /var/run/docker.sock:/var/run/docker.sock:ro
        - ./portainer-data:/data
      networks:
        - proxy
      labels:
        ## Expose portainer Through Trefik ##
        - "traefik.enable=true" # <== Enable traefik to proxy this container
        
        - "traefik.http.middlewares.redirect-web-secure.redirectscheme.scheme=https"
        - "traefik.http.routers.portainer-insecure.loadbalancer.server.port=9443"
        - "traefik.http.routers.portainer-insecure.middlewares=redirect-web-secure"
        - "traefik.http.routers.portainer-insecure.rule=Host(`portainer.luke-else.co.uk`)"
        - "traefik.http.routers.portainer-insecure.entrypoints=web"

        - "traefik.http.routers.portainer.loadbalancer.server.port=9443"
        - "traefik.docker.network=proxy"
        - "traefik.http.routers.portainer.rule=Host(`portainer.luke-else.co.uk`)"
        - "traefik.http.routers.portainer.entrypoints=websecure"
        - "traefik.http.routers.portainer.tls.certresolver=myresolver"
      restart: unless-stopped

networks:
  proxy:
    external: true