- name: traefik
  type: container
  image: docker.io/traefik:latest
  pull: newer
  volumes:
    - "{{ config_root }}/traefik:/etc/traefik:Z"
  env:
    TZ: "{{ tz }}"
  command:
    - "--api.dashboard=true"
    - "--api.insecure=true"
    - "--providers.file.directory=/etc/traefik/dynamic"
    - "--providers.file.watch=true"
    - "--entrypoints.web.address=:80"
    - "--entrypoints.websecure.address=:443"
    - "--entrypoints.websecure.http.tls.certFile=/etc/traefik/server.crt"
    - "--entrypoints.websecure.http.tls.keyFile=/etc/traefik/server.key"
    - "--log.level=INFO"
  restart_policy: on-failure