version: '3.7'

services:
  nginx-relay:
    image: nginx:alpine
    restart: unless-stopped

    volumes:
      - ./nginx.conf:/etc/nginx/nginx.conf:ro

    networks:
      - proxy

    labels:
      - 'traefik.enable=true'
      - 'traefik.docker.network=proxy'
      - 'traefik.tcp.routers.signal-proxy.rule=HostSNI("s1gn4l.example.com")'
      - 'traefik.tcp.routers.signal-proxy.entrypoints=https'
      - 'traefik.tcp.routers.signal-proxy.tls=true'
      - 'traefik.tcp.routers.signal-proxy.tls.certresolver=letsencrypt'
      - 'traefik.tcp.routers.signal-proxy.service=nginx-relay'
      - 'traefik.tcp.services.nginx-relay.loadbalancer.server.port=4433'

networks:
  proxy:
    external: true