services:
  portainer:
    container_name: portainer
    image: portainer/portainer-ce:lts
    restart: always
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - ./portainer_data:/data
    ports:
      - 9443:9443
      # - 8000:8000  # Remove if you do not intend to use Edge Agents
    networks:
      - traefik-proxy
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.${PORTAINER_APPNAME:-portainer}.rule=Host(`${PORTAINER_SUBDOMEN:-portainer}.${HOST:-workstation}`)"
      - "traefik.http.routers.${PORTAINER_APPNAME:-portainer}.entrypoints=websecure"
      - "traefik.http.routers.${PORTAINER_APPNAME:-portainer}.tls=true"
      - "traefik.http.routers.${PORTAINER_APPNAME:-portainer}.tls.certresolver=le"
      - "traefik.http.services.${PORTAINER_APPNAME:-portainer}.loadbalancer.server.port=9443"
      - "traefik.http.services.${PORTAINER_APPNAME:-portainer}.loadbalancer.server.scheme=https"

volumes:
  portainer_data:
    name: portainer_data

networks:
  default:
    name: portainer_network
  traefik-proxy:
    external: true