---
services:
    it-tools:
        image: 'corentinth/it-tools:latest'
        #ports:
        #    - '8080:80'
        restart: unless-stopped
        container_name: it-tools
        networks:
          - proxy
        labels:
          - "traefik.enable=true"
          - "traefik.docker.network=proxy"
          - "traefik.http.routers.it-tools.entrypoints=http"
          - "traefik.http.routers.it-tools.rule=Host(`it-tools.local.kptree.net`)"
          #- "traefik.http.middlewares.it-tools-https-redirect.redirectscheme.scheme=https"
          #- "traefik.http.routers.it-tools.middlewares=it-tools-https-redirect"
          - "traefik.http.routers.it-tools.middlewares=secured@file"
          - "traefik.http.routers.it-tools-secure.entrypoints=https"
          - "traefik.http.routers.it-tools-secure.rule=Host(`it-tools.local.kptree.net`)"
          - "traefik.http.routers.it-tools-secure.tls=true"
          - "traefik.http.routers.it-tools-secure.tls.certresolver=hurricane"
          - "traefik.http.routers.it-tools-secure.service=it-tools"
          - "traefik.http.services.it-tools.loadbalancer.server.port=80"

networks:
  proxy:
    external: true

---
services:
    CyberChef:
        image: 'ghcr.io/gchq/cyberchef:latest'
        #ports:
        #    - '8080:80'
        restart: unless-stopped
        container_name: cyber-chef
        networks:
          - proxy
        labels:
          - "traefik.enable=true"
          - "traefik.docker.network=proxy"
          - "traefik.http.routers.cyber-chef.entrypoints=http"
          - "traefik.http.routers.cyber-chef.rule=Host(`cyber-chef.local.kptree.net`)"
          #- "traefik.http.middlewares.cyber-chef-https-redirect.redirectscheme.scheme=https"
          #- "traefik.http.routers.cyber-chef.middlewares=cyber-chef-https-redirect"
          - "traefik.http.routers.dockge-secure.middlewares=secured@file"
          - "traefik.http.routers.cyber-chef-secure.entrypoints=https"
          - "traefik.http.routers.cyber-chef-secure.rule=Host(`cyber-chef.local.kptree.net`)"
          - "traefik.http.routers.cyber-chef-secure.tls=true"
          - "traefik.http.routers.cyber-chef-secure.tls.certresolver=hurricane"
          - "traefik.http.routers.cyber-chef-secure.service=cyber-chef"
          - "traefik.http.services.cyber-chef.loadbalancer.server.port=80"

networks:
  proxy:
    external: true

---
services:
  dockge:
    image: louislam/dockge:1
    restart: unless-stopped
 
#    ports:
#      # Host Port : Container Port
#      - 5001:5001
    
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - ./data:/app/data
 
      # If you want to use private registries, you need to share the auth file with Dockge:
      # - /root/.docker/:/root/.docker
 
      # Stacks Directory
      # ⚠️ READ IT CAREFULLY. If you did it wrong, your data could end up writing into a WRONG PATH.
      # ⚠️ 1. FULL path only. No relative path (MUST)
      # ⚠️ 2. Left Stacks Path === Right Stacks Path (MUST)
      - /mnt/docker_store:/mnt/docker_store

    environment:
      # Tell Dockge where is your stacks directory
      - DOCKGE_STACKS_DIR=/mnt/docker_store

    networks:
      - proxy

    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=proxy"
      #- "traefik.http.routers.dockge.entrypoints=http"
      #- "traefik.http.routers.dockge.rule=Host(`dockge.local.kptree.net`)"
      #- "traefik.http.routers.dockge-secure.middlewares=https-redirectscheme@file"
      #- "traefik.http.routers.dockge-secure.middlewares=middlewares-secure-headers@file" 
      - "traefik.http.routers.dockge-secure.middlewares=secured@file"
      - "traefik.http.routers.dockge-secure.entrypoints=https"
      - "traefik.http.routers.dockge-secure.rule=Host(`dockge.local.kptree.net`)"
      - "traefik.http.routers.dockge-secure.tls=true"
      - "traefik.http.routers.dockge-secure.tls.certresolver=hurricane"
      - "traefik.http.routers.dockge-secure.service=dockge"
      - "traefik.http.services.dockge.loadbalancer.server.port=5001" # make sure the loadbalancer is the last line!!!

networks:
  proxy:
    external: true