services:
  portainer:
    image: portainer/portainer-ee:2.39.1
    container_name: portainer
    profiles:
      - legacy
    restart: unless-stopped

    volumes:
      - /opt/portainer/secrets/portainer:/run/secrets/portainer:ro,Z
      - /opt/portainer/secrets/portainer:/run/portainer/portainer:ro,Z
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - /opt/portainer/data:/data:Z

    security_opt:
      - label=disable

    networks:
      - proxy

    labels:
      - "traefik.enable=false"

networks:
  proxy:
    external: true