docker-compose.yml

version: '3.2'
services:
  proxy:
    image: traefik:v2.4
    command:
        - "--log.level=INFO"
        - "--api.insecure=true"
        - "--providers.docker=true"
        - "--providers.docker.exposedbydefault=false"
#        - "--providers.file.directory=/configuration/"
#        - "--providers.file.watch=true"
        - "--entrypoints.web.address=:80"
        - "--entrypoints.websecure.address=:443"
        - "--entrypoints.web.http.redirections.entrypoint.to=websecure"
        - "--entrypoints.web.http.redirections.entrypoint.scheme=https"
        - "--certificatesresolvers.myresolver.acme.httpchallenge=true"
        - "--certificatesresolvers.myresolver.acme.httpchallenge.entrypoint=web"
        - "--certificatesresolvers.myresolver.acme.email=youremail@yourdomain.com"
        - "--certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json"
    ports:
      - '443:443'
      - '80:80'
      - '8080:8080'
    networks:
      - 'storage'
    volumes:
      - './docker/letsencrypt:/letsencrypt'
      - 'server_certs:/usr/share/nginx/certs'
      - '/var/run/docker.sock:/var/run/docker.sock:ro'
    depends_on:
      - 'storage'

  storage:
    image: opencadc/storage:9-jdk11-slim
    ports:
      - '5555:5555'
    networks:
      - 'storage'
    labels:
      - "traefik.enable=true"
      - "traefik.http.services.bitwarden.loadbalancer.server.port=8080"
      - "traefik.http.routers.bitwarden.rule=PathPrefix(`/storage`)"
      - "traefik.http.routers.bitwarden.entrypoints=websecure"
      - "traefik.http.routers.bitwarden.tls.certresolver=myresolver"
    environment:
      CATALINA_OPTS: -DSSO_SERVERS="www.canfar.net"

networks:
  storage:

volumes:
  server_certs:
    external: true