[Unit]
Description=Traefik Container
After=docker.service
Requires=docker.service

[Service]
TimeoutStartSec=0
Restart=always
ExecStartPre=-/usr/bin/docker stop traefik
ExecStartPre=-/usr/bin/docker rm traefik
ExecStartPre=-/usr/bin/docker pull traefik:latest
ExecStart=/usr/bin/docker run \
  -e TRAEFIK_LOG_LEVEL=INFO \
  -e TRAEFIK_ENTRYPOINTS_INSECURE_ADDRESS=:80 \
  -e TRAEFIK_ENTRYPOINTS_SECURE_ADDRESS=:443 \
  -e TRAEFIK_ENTRYPOINTS_SECURE_HTTP_TLS=true \
  -e TRAEFIK_ENTRYPOINTS_SECURE_HTTP_TLS_CERTRESOLVER=LE \
  -e TRAEFIK_CERTIFICATESRESOLVERS_LE=true \
  -e TRAEFIK_CERTIFICATESRESOLVERS_LE_ACME_EMAIL=torjuspuz@gmail.com \
  -e TRAEFIK_CERTIFICATESRESOLVERS_LE_ACME_HTTPCHALLENGE_ENTRYPOINT=insecure \
  -e TRAEFIK_CERTIFICATESRESOLVERS_LE_ACME_KEYTYPE=EC256 \
  -e TRAEFIK_CERTIFICATESRESOLVERS_LE_ACME_STORAGE=/acme.json \
  -e TRAEFIK_PROVIDERS_DOCKER=true \
  -e TRAEFIK_PROVIDERS_DOCKER_EXPOSEDBYDEFAULT=false \
  -l "traefik.http.routers.http_catchall.rule=HostRegexp(`{any:.+}`)" \
  -l "traefik.http.routers.http_catchall.entrypoints=insecure" \
  -l "traefik.http.routers.http_catchall.middlewares=https_redirect" \
  -l "traefik.http.middlewares.https_redirect.redirectscheme.scheme=https" \
  -l "traefik.http.middlewares.https_redirect.redirectscheme.permanent=true" \
  -p 443:443 \
  -p 80:80 \
  -v /var/run/docker.sock:/var/run/docker.sock \
  -v /var/traefik/acme.json:/acme.json \
  --network proxy \
  --name traefik traefik:latest

[Install]
WantedBy=multi-user.target