docker-compose.yml

version: "3"

services:

  app:

    image: mbentley/omada-controller:5.7
    restart: always
    ports:
      - 8088:8088
      - 8043:8043
      - 8843:8843 
      - 27001:27001/udp 
      - 29810:29810/udp 
      - 29811:29811 
      - 29812:29812 
      - 29813:29813 
      - 29814:29814 
    sysctls:
      - net.ipv4.ip_unprivileged_port_start=0
    volumes:
      - "{{ basedir }}/data:/opt/tplink/EAPController/data"
      - "{{ basedir }}/logs:/opt/tplink/EAPController/logs"
    environment:
      TZ: Europe/Berlin
      PUID: 508
      PGID: 508
      MANAGE_HTTP_PORT: 80
      MANAGE_HTTPS_PORT: 443
      PORTAL_HTTP_PORT: 8088
      PORTAL_HTTPS_PORT: 8843
      PORT_ADOPT_V1: 29812
      PORT_APP_DISCOVERY: 27001
      PORT_DISCOVERY: 29810
      PORT_MANAGER_V1: 29811
      PORT_MANAGER_V2: 29814
      PORT_UPGRADE_V1: 29813
      SHOW_SERVER_LOGS: "true"
      SHOW_MONGODB_LOGS: "false"
      SSL_CERT_NAME: "tls.crt"
      SSL_KEY_NAME: "tls.key"
    labels:
      - traefik.enable=true
      - traefik.http.routers.{{ servicename }}.rule=Host(`{{ domain }}`)
      - traefik.http.routers.{{ servicename }}.entrypoints=websecure
      - traefik.http.services.{{ servicename }}.loadbalancer.serversTransport={{ servicename }}
      - traefik.http.services.{{ servicename }}.loadbalancer.server.port=443
      - traefik.http.services.{{ servicename }}.loadbalancer.server.scheme=https
      - traefik.http.serversTransports.{{ servicename }}.insecureSkipVerify=true
    networks:
      - default
      - web

networks:
  web:
    external: true