api:
  dashboard: true

entryPoints:
  http:
    address: ":80"
  https:
    address: ":443"

providers:
  docker:
    endpoint: "unix:///var/run/docker.sock"
    exposedByDefault: false

  file:
    directory: /config

#certificatesResolvers:
#  http:
#    acme:
#      email: email@example.com
#      storage: acme.json
#      httpChallenge:
#        entryPoint: http

version: '3'

services:
  traefik2:
    image: traefik:v2.0
    container_name: traefik2
    restart: unless-stopped
    ports:
      - 80:80
      - 443:443
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ./traefik.yml:/traefik.yml:ro
      - ./config:/config:ro
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.api.rule=Host(`traefik2.docker.lab`)"
      - "traefik.http.routers.api.service=api@internal"
      - "traefik.docker.network=traefik_proxy"
      - "traefik.http.routers.api.tls=true"
    networks:
      - traefik_proxy

networks:
  traefik_proxy:
    external:
      name: traefik_proxy

[[tls.certificates]] #first certificate
   certFile = "/config/crypto/ttrss.pi-docker.lab.crt"
   keyFile = "/config/crypto/ttrss.pi-docker.lab.key"

[[tls.certificates]] #first certificate
   certFile = "/config/crypto/traefik2.pi-docker.lab.crt"
   keyFile = "/config/crypto/traefik2.pi-docker.lab.key"

[tls.stores]
  [tls.stores.default]
   [tls.stores.default.defaultCertificate]
     certFile = "/config/crypto/wildcardcert.pi-docker.lab.crt"
     keyFile = "/config/crypto/wildcardcert.pi-docker.lab.key"