services:
  traefik:
    image: traefik:v3.0
    container_name: traefik
    restart: unless-stopped
    depends_on:
      - crowdsec
    networks:
      - traefik-public
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - /srv/docker/traefik/data/traefik.yml:/etc/traefik/traefik.yml:ro
      - /srv/docker/traefik/data/acme.json:/acme.json
      - /srv/docker/traefik/external_config:/etc/traefik/external/

  crowdsec:
    image: crowdsecurity/crowdsec:v1.7
    container_name: crowdsec
    restart: unless-stopped
    networks:
      - traefik-public
    environment:
      - COLLECTIONS=crowdsecurity/nginx crowdsecurity/http-cve
    volumes:
      - /srv/docker/crowdsec/config:/etc/crowdsec
      - /srv/docker/crowdsec/data:/var/lib/crowdsec/data
      - /var/log:/var/log:ro

networks:
  traefik-public:
    external: true