[Unit]
Description=Traefik Reverse Proxy
ConditionPathExists=/etc/traefik/traefik.yml
StartLimitBurst=3
StartLimitIntervalSec=60
After=network.target network-online.target
Wants=network-online.target

[Service]
Type=simple
AmbientCapabilities=CAP_NET_BIND_SERVICE
EnvironmentFile=/etc/traefik/traefik.env
Restart=on-failure
ExecStart=/usr/sbin/traefik --configfile '/etc/traefik/traefik.yml'
ExecStartPost=/bin/sh -c "umask '022'; /usr/bin/pgrep --newest 'traefik' > '/run/traefik/traefik.pid'"
ExecStop=/bin/rm --force '/run/traefik/traefik.pid'
User=traefik
Group=traefik
PrivateDevices=true
PrivateTmp=true
ProtectSystem=strict
ReadWriteDirectories=/var/lib/traefik
ReadWriteDirectories=/var/log/traefik
RuntimeDirectory=traefik
RuntimeDirectoryMode=755
RuntimeDirectoryPreserve=yes
WorkingDirectory=/var/lib/traefik

[Install]
WantedBy=multi-user.target