name: reverse-proxy

services:
  sablier:
    container_name: sablier
    image: sablierapp/sablier:1.10.1
    command:
      - start
      - --provider.name=docker
    volumes:
      - '/var/run/docker.sock:/var/run/docker.sock'
      - "/root/docker/traefik/sablier/sablier.yml:/etc/sablier/sablier.yml"
    networks:
      - traefik-reverse
    ports:
      - "10000:10000"
    restart: unless-stopped

  reverse-proxy:
    # The official v3 Traefik docker image
    container_name: traefik
    image: traefik:v3.5
    # Enables the web UI and tells Traefik to listen to docker a
    ports:
      # The HTTP port
      - "80:80"
      - "443:443"
      # The Web UI (enabled by --api.insecure=true)
      - "8080:8080"
    volumes:
      # Socket Docker pour la détection des conteneurs
      - /var/run/docker.sock:/var/run/docker.sock:ro # :ro pour read-only est une bonne pratique

      # Fichier de configuration statique
      - /root/docker/traefik/traefik.yml:/etc/traefik/traefik.yml:ro

      # Répertoire pour les configurations dynamiques
      - /root/docker/traefik/config/:/etc/traefik/dynamic_config/:ro

      # Volume pour stocker les certificats Let's Encrypt (acme)
      - /root/docker/traefik/acme/:/etc/traefik/acme/
    restart: unless-stopped

    networks:
      - traefik-reverse
      - lobe-external-network
      - nocodb-external-network
      #- paperlessngx-external-network
      - stirlingpdf-external-network
      - nextcloud-external-network
      - authentik-external-network
      - maybe-external-network
      - linkwarden-external-network
      - hoarder-external-network
      #- n8n-external-network
      - webappmath-external-network
      #- guacamole-external-network
      #- uptime-kuma-external-network
      - actual-budget-external-network
      #- appflowy-external-network
      - webhook-external-network
      - minilab-arr-external
      - open-webui-external-network
      - ntfy-external
      - litellm_external
      - kestra_external
      - puter-external
      - supabase_external
      - webhook_handler_network
      - puter-external-network
      - komodo-external-network
      - semaphore-external-network
      - glance-external-network
      - waka-external
      - openproject-front-network
      - outline-pms-external
      - affine-external
      - invoiceshelf-external
      - litellm-external
      - vaultwarden-external
      - code-external-network

    environment:
      - CF_DNS_API_TOKEN=${CF_DNS_API_TOKEN}
  whoami:
    container_name: whoami
    # A container that exposes an API to show its IP address
    image: traefik/whoami
    labels:
      - sablier.enable=true

    networks:
      - traefik-reverse

  tunnel:
    container_name: cloudflared-tunnel
    image: cloudflare/cloudflared:latest
    restart: unless-stopped
    command: tunnel run
    networks:
      - traefik-reverse
    environment:
      - TUNNEL_TOKEN=${TUNNEL_TOKEN}

networks:
  traefik-reverse:
    name: traefik-reverse
  lobe-external-network:
    external: true
  nocodb-external-network:
    external: true
    #paperlessngx-external-network:
    #external: true
  stirlingpdf-external-network:
    external: true
  nextcloud-external-network:
    external: true
  authentik-external-network:
    external: true
  maybe-external-network:
    external: true
  linkwarden-external-network:
    external: true
  hoarder-external-network:
    external: true
    #n8n-external-network:
    #external: true
  webappmath-external-network:
    external: true
    #guacamole-external-network:
    #external: true
    #uptime-kuma-external-network:
    #external: true
  actual-budget-external-network:
    external: true
    #appflowy-external-network:
    #external: true
  webhook-external-network:
    external: true
  minilab-arr-external:
    external: true
  open-webui-external-network:
    external: true
  ntfy-external:
    external: true
  litellm_external:
    external: true
  kestra_external:
    external: true
  puter-external:
    external: true
  supabase_external:
    external: true
  webhook_handler_network:
    external: true
  puter-external-network:
    external: true
  komodo-external-network:
    external: true
  semaphore-external-network:
    external: true
  glance-external-network:
    external: true
  waka-external:
    external: true
  openproject-front-network:
    external: true
  outline-pms-external:
    external: true
  affine-external:
    external: true
  invoiceshelf-external:
    external: true
  litellm-external:
    external: true
  invoiceninja-internal:
    external: true
  vaultwarden-external:
    external: true
  code-external-network:
    external: true