version: "3"
services:
  wireshark:
    image: lscr.io/linuxserver/wireshark:latest
    container_name: wireshark
    cap_add:
      - NET_ADMIN
    security_opt:
      - seccomp:unconfined #optional
    network_mode: host
    # networks:
    #   - traefik
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Etc/UTC
      - CUSTOM_USER=admin
      - PASSWORD=Lukmignuind@1
      - CUSTOM_PORT=3020
      - CUSTOM_HTTPS_PORT=3040
    volumes:
      - /path/to/config:/config
    # ports:
    #   - 3020:3000 #optional
    #   - 3001:3001 #optional
    restart: unless-stopped
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.wireshark.entrypoints=websecure"
      - "traefik.http.routers.wireshark.rule=Host(`wireshark.$DOMAIN_NAME`)"
      - "traefik.http.routers.wireshark.tls.certresolver=letsencr"
      - "traefik.http.services.wireshark.loadbalancer.server.port=3020"
      - "traefik.http.services.wireshark.loadbalancer.server.scheme=https"
      # - "traefik.http.routers.wireshark.middlewares=wireshark_auth"
      # - "traefik.http.middlewares.wireshark_auth.basicauth.users=admin:$$2a$$12$$MkhjqyuriyoE5.Mhz14ZXOkfjE7wUEDb46e9argix38VHZ5aAuGQC"

networks:
  traefik:
    external: true