version: '3.9'

services:
  portainer:
    container_name: {{ customer }}-portainer
    image: portainer/portainer-ce:latest
    restart: always
    labels:
      - "diun.enable=true"
    ports:
      - '127.0.0.1:9000:9000'
      - '127.0.0.1:9443:9443'
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - {{ customer }}-portainer_data:/data
      - {{ customer }}-portainer-backups:/tmp/backups
      - /opt/letsbe/env/portainer_admin_password.txt:/tmp/portainer_admin_password.txt:ro
    command: --admin-password-file /tmp/portainer_admin_password.txt
    networks:
      {{ customer }}-portainer:
        ipv4_address: 172.20.20.2

networks:
  {{ customer }}-portainer:
    ipam:
      driver: default
      config:
        - subnet: 172.20.20.0/28
          gateway: 172.20.20.1

volumes:
  {{ customer }}-portainer_data:
  {{ customer }}-portainer-backups: