---
version: "2.1"
services:
  swag:
    image: lscr.io/linuxserver/swag
    container_name: swag
    cap_add:
      - NET_ADMIN
    environment:
      - PUID={{ users.0.uid }}
      - PGID={{ users.0.gid }}
      - TZ={{ ntp_timezone }}
      - URL={{ sl_domain }}
      - SUBDOMAINS=wildcard
      - EXTRA_DOMAINS=*.{{ mail_domain }}
      - VALIDATION=dns
      - DNSPLUGIN=cloudflare
      - EMAIL={{ secret_cloudflare.email }}
      - STAGING=false
      - DOCKER_MODS=linuxserver/mods:universal-docker|linuxserver/mods:swag-auto-proxy|swag-maxmind
      - DOCKER_HOST=dockerproxy:2375
    volumes:
      - type: bind
        source: /opt/appdata/swag/config
        target: /config
      - type: tmpfs
        target: /config/nginx/proxy-confs
    networks:
      - default
      - docker
    ports:
      - 443:443
      - 80:80
    restart: unless-stopped

  dockerproxy:
    image: ghcr.io/tecnativa/docker-socket-proxy:latest
    container_name: dockerproxy
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
    restart: unless-stopped
    networks:
      - docker
    environment:
      - CONTAINERS=1
      - POST=0

networks:
  default:
    external: true
    name: proxynet

  docker:
    internal: true
    name: docker