Traefik with Docker Swarm and TLS

gogs.sh

docker service create \
  --network traefik-net \
  --name gogs \
  --mount src=gogs,dst=/data \
  --constraint node.hostname=="hostname-1" \
  --label traefik.port=3000 \
  --label traefik.frontend.rule=Host:git.xxx.com \
  gogs/gogs

jenkins.sh

docker service create \
  --network traefik-net \
  --name jenkins \
  --mount src=jenkins,dst=/var/jenkins_home \
  --constraint node.hostname=="hostname-1" \
  --label traefik.port=8080 \
  --label traefik.frontend.rule=Host:jenkins.xxx.com \
  jenkins/jenkins:2.74-alpine

registry.sh

docker service create \
  --network traefik-net \
  --name registry \
  --mount src=registry,dst=/var/lib/registry \
  --constraint node.hostname=="hostname-1" \
  --label traefik.port=5000 \
  --label traefik.frontend.rule=Host:registry.xxx.com \
  registry:2

traefik.sh

docker service create \
    --name traefik \
    --constraint=node.role==manager \
    --publish 80:80 --publish 443:443 --publish 18080:8080 \
    --mount type=bind,source=/var/run/docker.sock,target=/var/run/docker.sock \
    --mode=global \
    --network traefik-net \
    --secret source=ca.crt,target=/etc/traefik/tls/ca.crt \
    --secret source=ca.key,target=/etc/traefik/tls/ca.key \
    traefik:v1.3.5-alpine \
    --entryPoints='Name:http Address::80 Redirect.EntryPoint:https' \
    --entryPoints='Name:https Address::443 TLS:/etc/traefik/tls/ca.crt,/etc/traefik/tls/ca.key' \
    --defaultEntryPoints='http,https' \
    --docker \
    --docker.swarmmode \
    --docker.domain=traefik \
    --docker.watch \
    --web