services:
  teleport:
    image: teleport:18.7.3
    container_name: teleport-den
    restart: unless-stopped

    networks:
      - tan-network

    volumes:
      - /opt/stacks/00_teleport/config:/etc/teleport
      - /home/docker/teleport/data:/var/lib/teleport
  
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=tan-network"

      # TCP router (IMPORTANT)
      - "traefik.tcp.routers.teleport.rule=HostSNI(`teleport.luckyden.org`)"
      - "traefik.tcp.routers.teleport.entrypoints=websecure"
      - "traefik.tcp.routers.teleport.tls.passthrough=true"

      - "traefik.tcp.services.teleport.loadbalancer.server.port=3080"

networks:
  tan-network:
    external: true