hetzner/server/portainer/docker-compose.yml

services:
  portainer:
    image: portainer/portainer-ce:latest
    container_name: portainer_portainer
    restart: unless-stopped
    volumes:
      - portainer_portainer_data:/data
      - /var/run/docker.sock:/var/run/docker.sock:ro
    networks:
      - traefik-network
    labels:
      - "traefik.enable=true"
      - traefik.docker.network=traefik-network
      - traefik.constraint-label=traefik-network
      - traefik.http.routers.portainer.middlewares=http-to-https
      - traefik.http.routers.portainer-secure.rule=Host(`portainer.see1.ee`)
      - traefik.http.routers.portainer-secure.entrypoints=websecure
      - traefik.http.routers.portainer.rule=Host(`portainer.see1.ee`)
      - traefik.http.routers.portainer.entrypoints=web
      - "traefik.http.routers.portainer-secure.tls.certresolver=mychallenge"
      - traefik.http.services.portainer.loadbalancer.server.port=9000

volumes:
  portainer_portainer_data:
    external: true

networks:
  traefik-network:
    external: true