services:
  traefik:
    image: traefik:v2.10
    restart: always
    command:
      - --api.insecure=false
      - --providers.docker=true
      - --providers.docker.exposedbydefault=false
      - --entrypoints.web.address=:80
      - --entrypoints.web.http.redirections.entryPoint.to=https
      - --entrypoints.web.http.redirections.entryPoint.scheme=https
      - --entrypoints.https.address=:443
      - --certificatesresolvers.le.acme.tlschallenge=true
      - --certificatesresolvers.le.acme.email=transfer.sh@moeny.ai
      - --certificatesresolvers.le.acme.storage=/letsencrypt/acme.json
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - traefik:/letsencrypt:rw
      - /var/run/docker.sock:/var/run/docker.sock:ro
    
  transfer:
    image: dutchcoders/transfer.sh:latest
    volumes:
      - /mnt/nfs/transfer-sh:/txdata
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.transfer.rule=Host(`tx.moeny.ai`)"
      - "traefik.http.routers.transfer.entrypoints=https"
      - "traefik.http.routers.transfer.tls.certresolver=le"
      - "traefik.http.services.transfer.loadbalancer.server.port=8080"
    command:
      - --provider=local
      - --basedir=/txdata
      - --random-token-length=10
      - --http-auth-user=moeny
      - --http-auth-pass=m0eny-TX-98765!
    restart: always

volumes:
  traefik: { driver: local }