ansible

ansible/roles/traefik/templates/docker-compose.yml.j2

@@ -0,0 +1,26 @@
+services:
+  traefik:
+    image: traefik:v3.2
+    container_name: traefik
+    restart: unless-stopped
+    security_opt:
+      - no-new-privileges:true
+    networks:
+      - {{ traefik_network }}
+    ports:
+      - "80:80"
+      - "443:443"
+      - "10.20.0.10:8080:8080"  # Dashboard only on WireGuard IP
+    environment:
+      - TZ=UTC
+    volumes:
+      - /etc/localtime:/etc/localtime:ro
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+      - ./traefik.yml:/traefik.yml:ro
+      - ./config:/config:ro
+      - ./letsencrypt:/letsencrypt
+      - ./logs:/var/log/traefik
+
+networks:
+  {{ traefik_network }}:
+    external: true