version: "3"

networks:
  web:
    external: true

services:
  ssh:
    build: ./build
    restart: unless-stopped
    networks:
      web:
    environment:
      SSH_USERS:
    volumes:
      - ./authorized_keys:/conf.d/authorized_keys
      - ./ssh:/etc/ssh
    labels:
      traefik.enable: true
      traefik.tcp.services.ssh.loadbalancer.server.port: 22
      traefik.tcp.routers.ssh.rule: HostSNI(`*`)
      traefik.tcp.routers.ssh.entrypoints: websecure