services:
  portainer:
    profiles: ["monitoring","all","portainer"]
    image: portainer/portainer-ce:latest
    container_name: portainer
    restart: unless-stopped
    depends_on:
      - docker-socket-proxy
    command: -H ${DOCKER_SOCKET_PROXY_HOST}
    volumes:
      - ${PROJECT_ROOT}/monitoring/portainer/data:/data
    networks:
#      - traefik_reverse_proxy
      - traefik
    labels:
      - traefik.enable=true

      # Router
      - traefik.http.routers.portainer.rule=Host(`portainer.lan.ddnsgeek.com`)
      - traefik.http.routers.portainer.entrypoints=websecure
      - traefik.http.routers.portainer.tls=true
      - traefik.http.routers.portainer.tls.certresolver=myresolver
      - io.portainer.accesscontrol.public
      # Service -> Portainer listens on 9000 inside the container
      - traefik.http.services.portainer.loadbalancer.server.port=9000

    environment:
      - GODEBUG=${PORTAINER_GODEBUG}
#    healthcheck:
#      test: ["CMD", "wget", "--spider", "-q", "https://portainer.lan.ddnsgeek.com/api/status"]
#      interval: 30s
#      timeout: 10s
#      retries: 3
#      start_period: 30s


#networks:
#  traefik_reverse_proxy:
#    external: true
#  internal:
#    driver: bridge