services:

traefik:

image: traefik:latest

container_name: traefik

restart: unless-stopped

ports:

- "80:80"

- "443:443"

volumes:

- /var/run/docker.sock:/var/run/docker.sock:ro

- ./acme.json:/acme.json

command:

- "--providers.docker=true"

- "--entrypoints.web.address=:80"

- "--entrypoints.websecure.address=:443"

# Global redirect to https

- "--entrypoints.web.http.redirections.entrypoint.to=websecure"

# ACME configuration

- "--certificatesresolvers.myresolver.acme.httpchallenge=true"

- "--certificatesresolvers.myresolver.acme.httpchallenge.entrypoint=web"

- "--certificatesresolvers.myresolver.acme.email=${LETSENCRYPT_EMAIL}"

- "--certificatesresolvers.myresolver.acme.storage=/acme.json"

go-shp:

image: ghcr.io/winguse/go-shp:latest

container_name: go-shp

labels:

- "traefik.enable=true"

- "traefik.tcp.routers.go-shp.entrypoints=websecure"

- "traefik.tcp.routers.go-shp.tls=true"

- "traefik.tcp.routers.go-shp.tls.certresolver=myresolver"

- "traefik.tcp.routers.go-shp.rule=HostSNI(`${GO_SHP_FQDN}`)"

- "traefik.tcp.services.go-shp.loadbalancer.proxyprotocol.version=2"

- "traefik.tcp.services.go-shp.loadbalancer.server.port=3000"

restart: unless-stopped

volumes:

- ./config.yaml:/data/config.yaml