traefik-forward-auth/examples/traefik-v1.7/swarm/docker-compose-auth-host.yml

version: '3'

services:
  traefik:
    image: traefik
    command: -c /traefik.toml --logLevel=DEBUG
    ports:
      - "8085:80"
      - "8086:8080"
    networks:
      - traefik
    volumes:
      - ./traefik.toml:/traefik.toml
      - /var/run/docker.sock:/var/run/docker.sock

  whoami1:
    image: containous/whoami
    networks:
      - traefik
    labels:
      - "traefik.backend=whoami"
      - "traefik.enable=true"
      - "traefik.frontend.rule=Host:whoami.yourdomain.com"

  traefik-forward-auth:
    image: thomseddon/traefik-forward-auth:2
    environment:
      - PROVIDERS_GOOGLE_CLIENT_ID=your-client-id
      - PROVIDERS_GOOGLE_CLIENT_SECRET=your-client-secret
      - SECRET=something-random
      - INSECURE_COOKIE=true
      - DOMAIN=yourcompany.com
      - AUTH_HOST=auth.yourdomain.com
    networks:
      - traefik
    # When using an auth host, the below must be added
    labels:
      - traefik.enable=true
      - traefik.port=4181
      - traefik.backend=traefik-forward-auth
      - traefik.frontend.rule=Host:auth.yourdomain.com

networks:
  traefik: