version: '3'

services:
  portainer:
    image: portainer/portainer:latest
    container_name: portainer
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    networks:
      - proxy
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - portainer_data:/data
    labels:
      traefik.docker.network: proxy
      traefik.enable: "true"
      traefik.http.routers.portainer-secure.entrypoints: websecure
      traefik.http.routers.portainer-secure.middlewares: default@file
      traefik.http.routers.portainer-secure.rule: Host(`portainer.prothmann.com`)
      traefik.http.routers.portainer-secure.service: portainer
      traefik.http.routers.portainer-secure.tls: "true"
      traefik.http.routers.portainer-secure.tls.certresolver: http_resolver
      traefik.http.routers.portainer.entrypoints: web
      traefik.http.routers.portainer.rule: Host(`nextcloud.prothmann.com`)
      traefik.http.services.portainer.loadbalancer.server.port: "9000"

volumes:
  portainer_data:
    driver: local
    driver_opts:
      type: nfs
      o: "addr=192.168.102.14,rw,nolock,nfsvers=4,async"
      device: ":/data/docker-volumes/portainer_data"

networks:
  proxy:
    external: true