networks:
  traefik:
    external: true
    name: "traefik"

services:
  nopaque:
    environment:
      NOPAQUE_PROXY_FIX_ENABLED: "True"
      NOPAQUE_PROXY_FIX_X_FOR: "1"
      NOPAQUE_PROXY_FIX_X_HOST: "1"
      NOPAQUE_PROXY_FIX_X_PORT: "1"
      NOPAQUE_PROXY_FIX_X_PREFIX: "0"
      NOPAQUE_PROXY_FIX_X_PROTO: "1"
    labels:
      - "traefik.enable=true"
      # HTTP
      - "traefik.http.routers.http-nopaque.entrypoints=http"
      - "traefik.http.routers.http-nopaque.middlewares=redirect-to-https@file"
      # Replace <nopaque-domain> with your domain
      - "traefik.http.routers.http-nopaque.rule=Host(`<nopaque-domain>`)"
      # HTTPS
      - "traefik.http.routers.https-nopaque.entrypoints=https"
      - "traefik.http.routers.https-nopaque.middlewares=hsts-header@file"
      # Replace <nopaque-domain> with your domain
      - "traefik.http.routers.https-nopaque.rule=Host(`<nopaque-domain>`)"
      - "traefik.http.routers.https-nopaque.tls.certresolver=<CERTRESOLVER>"
      - "traefik.http.routers.https-nopaque.tls.options=intermediate@file"
    networks:
      - "nopaque"
      - "traefik"