[Unit]
After=podman.socket http.socket https.socket
Requires=podman.socket http.socket https.socket

[Service]
Sockets=http.socket https.socket
Restart=always

[Container]
ContainerName=traefik
Image=docker.io/library/traefik:latest
Exec=--api.dashboard=true --api.insecure=true --certificatesresolvers.lets-encrypt.acme.email={{ infra_acme.email }} --certificatesresolvers.lets-encrypt.acme.storage=/{{ infra_acme.storage }} --certificatesresolvers.lets-encrypt.acme.tlschallenge=true --entrypoints.http --entrypoints.http.http.redirections.entryPoint.to=https --entrypoints.http.http.redirections.entryPoint.scheme=https --entrypoints.https --providers.docker=true
Network=podman
Notify=true
PublishPort=8080:8080
SecurityLabelDisable=true
Volume=%t/podman/podman.sock:/var/run/docker.sock
Volume=%h/{{ infra_acme.storage }}:/{{ infra_acme.storage }}:Z