networks:
  proxy:
    external: true

services:
  sftp:
    image: drakkan/sftpgo:alpine-slim
    ports:
      - "2022:2022"
    networks:
      - proxy
    environment:
      SFTPGO_HTTPD__BINDINGS__0__PORT: 8090
    restart: unless-stopped
    volumes:
      - /mnt/raid/sftp/data:/srv/sftpgo
      - /mnt/raid/sftp/home:/var/lib/sftpgo
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.sftp.entrypoints=web"
      - "traefik.http.routers.sftp.rule=Host(`sftp-asu.ddnss.de`)"
      - "traefik.http.routers.sftp.middlewares=sftp"
      - "traefik.http.middlewares.sftp.redirectscheme.scheme=https"
      - "traefik.http.routers.sftp-secure.entrypoints=websecure"
      - "traefik.http.routers.sftp-secure.rule=Host(`sftp-asu.ddnss.de`)"
      - "traefik.http.routers.sftp-secure.service=sftp-secure"
      - "traefik.http.routers.sftp-secure.tls=true"
      - "traefik.http.routers.sftp-secure.tls.certresolver=myresolver"
      - "traefik.http.services.sftp-secure.loadbalancer.server.port=8090"