docker-compose.labels.yml

version: "3.8"

services:
  authelia:
    labels:
      - traefik.enable=true
      - traefik.http.routers.authelia.entrypoints=websecure
      - traefik.http.routers.authelia.rule=Host(`${AUTH_SERVER_HOST}`)
      - traefik.http.routers.authelia.tls.certresolver=letsencrypt
      - traefik.http.routers.authelia.tls=true
  handle-errors:
    labels:
      - traefik.enable=true
      - traefik.http.routers.handle-errors.entrypoints=websecure
      - traefik.http.routers.handle-errors.rule=Host(`${HANDLE_ERRORS_HOST}`)
      - traefik.http.routers.handle-errors.tls.certresolver=letsencrypt
      - traefik.http.routers.handle-errors.tls=true
  traefik:
    labels:
      - traefik.enable=true
      - traefik.http.middlewares.auth.forwardauth.address=${AUTH_REDIRECT}
      - traefik.http.middlewares.auth.forwardauth.trustForwardHeader=true
      - traefik.http.middlewares.auth.forwardauth.authResponseHeaders=Remote-User,Remote-Groups,Remote-Name,Remote-Email
      - traefik.http.routers.traefik.entrypoints=websecure
      - traefik.http.routers.traefik.middlewares=secured@file
      - traefik.http.routers.traefik.rule=Host(`${TRAEFIK_DASHBOARD_HOST}`)
      - traefik.http.routers.traefik.service=api@internal
      - traefik.http.routers.traefik.tls.certresolver=letsencrypt
      - traefik.http.routers.traefik.tls=true
      - traefik.http.routers.traefik.tls.domains[0].sans=*.docker.localhost
  whoami:
    labels:
      - traefik.enable=true
      - traefik.http.routers.whoami.entrypoints=websecure
      - traefik.http.routers.whoami.middlewares=secured@file
      - traefik.http.routers.whoami.rule=Host(`${WHOAMI_HOST}`)
      - traefik.http.routers.whoami.tls.certresolver=letsencrypt
      - traefik.http.routers.whoami.tls=true
  secure-whoami:
    labels:
      - traefik.enable=true
      - traefik.http.routers.secure-whoami.entrypoints=websecure
      - traefik.http.routers.secure-whoami.middlewares=secured@file
      - traefik.http.routers.secure-whoami.rule=Host(`${SECURE_HOST}`)
      - traefik.http.routers.secure-whoami.tls.certresolver=letsencrypt
      - traefik.http.routers.secure-whoami.tls=true