infrastructure/coreos-config/compose/00_traefik/docker-compose.yaml

---
version: '3.9'
services:
  traefik:
    image: traefik:v2.7
    container_name: traefik
    restart: always
    ports:
      - "443:443"
      - "80:80"
    privileged: true
    labels:
      - "com.centurylinklabs.watchtower.scope=update"
    volumes:
      - "/var/run/docker.sock:/var/run/docker.sock:z"
      - "./traefik.yaml:/etc/traefik/traefik.yaml:Z,ro"
      - "acme:/acme"
    networks:
      - gateway
      - default
    environment:
      CLOUDFLARE_DNS_API_TOKEN: "{{ traefik.CLOUDFLARE_DNS_API_TOKEN }}"

volumes:
  acme:

networks:
  gateway:
    name: gateway
    internal: false
  default:
    driver: bridge
...