version: "3.6"
x-vs-version: :release-1.1.0 # bumpversion
services:
  reverse-proxy:
    image: traefik:2.1
    ports:
      - target: 80
        published: 80
        protocol: tcp
        mode: host
      - target: 443
        published: 443
        protocol: tcp
        mode: host
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - traefik-data:/etc/traefik/acme
      - ./traefik.yml:/etc/traefik/traefik.yml
      - ./traefik-dynamic.yml:/etc/traefik/traefik-dynamic.yml
    environment:
      HTTP_PROXY: "http://172.30.252.68:3128"
      HTTPS_PROXY: "http://172.30.252.68:3128"
      NO_PROXY: "172.0.0.0/8,192.168.0.0/16,10.0.0.0/8,shibauth"
    deploy:
      placement:
        constraints: [node.role == manager]
    networks:
      - vhr18-extnet
      - emg-extnet
      - dem-extnet
      - logging-extnet
    secrets:
      - BASIC_AUTH_USERS_APIAUTH
      - BASIC_AUTH_USERS_AUTH
volumes:
  traefik-data:
networks:
  vhr18-extnet:
    name: vhr18-extnet
  emg-extnet:
    name: emg-extnet
  dem-extnet:
    name: dem-extnet
  logging-extnet:
    name: logging-extnet
secrets:
  BASIC_AUTH_USERS_APIAUTH:
    external: true
  BASIC_AUTH_USERS_AUTH:
    external: true