Use secrets and configs

bootstrap.docker-compose.yaml

@@ -21,8 +21,9 @@ services:
     networks:
       - traefik
       - docker
-    volumes:
-      - traefik:/etc/traefik/
+    configs:
+      - source: traefik
+        target: /etc/traefik/
     depends_on:
       - docker
     restart: unless-stopped
@@ -40,6 +41,8 @@ services:
       - traefik
     volumes:
       - portainer:/data
+    secrets:
+      - portainer_password
     depends_on:
       - docker
     restart: unless-stopped
@@ -67,8 +70,12 @@ volumes:
   portainer:
     driver_opts:
       <<: *bind-volume
-      device: ${MOUNT_DIR?}/portainer/
+      device: ${MOUNT_DIR?}/portainer/data/
+
+config:
   traefik:
-    driver_opts:
-      <<: *bind-volume
-      device: ${MOUNT_DIR?}/traefik/
+    file: ${MOUNT_DIR?}/traefik/config/
+
+secrets:
+  portainer_password:
+    file: ${MOUNT_DIR?}/portainer/secrets/portainer_password

mounts/.gitignore

@@ -0,0 +1,4 @@
+*/data/*
+!*/data/README.md
+*/secrets/*
+!*/secrets/README.md

mounts/portainer/secrets/README.md

@@ -0,0 +1,2 @@
+Contains the file `portainer_password`
+More on https://docs.portainer.io/advanced/cli#method-2-creating-the-account-using-a-file

mounts/traefik/config/traefik.yaml

@@ -3,3 +3,6 @@ providers:
     endpoint: tcp://docker:2375
     exposedByDefault: false
     network: traefik
+
+api:
+  insecure: true

volumes/portainer/.gitignore

@@ -1 +0,0 @@
-./portainer_password

volumes/portainer/portainer_password

@@ -1 +0,0 @@
-admin