resource "docker_container" "traefik" {
  name  = local.docker_containers["traefik"].container_name
  image = local.docker_containers["traefik"].image

  restart = local.docker_containers["traefik"].restart_policy

  network_mode = "core_traefik"

  ports {
    internal = 80
    external = 80
    protocol = "tcp"
  }

  ports {
    internal = 443
    external = 443
    protocol = "tcp"
  }

  mounts {
    type      = "bind"
    source    = "/home/nixos/docker/core/traefik/data/letsencrypt"
    target    = "/letsencrypt"
    read_only = false
  }

  mounts {
    type      = "bind"
    source    = "/home/nixos/docker/core/traefik/data/logs"
    target    = "/logs"
    read_only = false
  }

  mounts {
    type      = "bind"
    source    = "/home/nixos/docker/core/traefik/certs"
    target    = "/etc/traefik/certs"
    read_only = true
  }

  mounts {
    type      = "bind"
    source    = "/home/nixos/docker/core/traefik/dynamic.yml"
    target    = "/etc/traefik/dynamic.yml"
    read_only = true
  }

  mounts {
    type      = "bind"
    source    = "/home/nixos/docker/core/traefik/traefik.yml"
    target    = "/etc/traefik/traefik.yml"
    read_only = true
  }

  mounts {
    type      = "bind"
    source    = "/home/nixos/docker/core/traefik/data/plugins"
    target    = "/plugins-storage"
    read_only = false
  }

  lifecycle {
    ignore_changes = [
      env,
      labels,
    ]
  }
}