broken-nginx.yml

version: '3'
services:
  nginx:
    image: 'nginx:alpine'
    restart: always
    networks:
      - web
    labels:
      - "traefik.docker.network=traefik"
      - "traefik.backend=blog"
      - "traefik.frontend.rule=Host:test.ondrovo.com"
      - "traefik.port=80"
      - "traefik.frontend.passHostHeader=true"
      - "traefik.protocol=http"
      - "traefik.frontend.redirect=https"
    volumes:
      - ./www/:/srv/blog/www/

networks:
  web:
    external:
      name: traefik

the.toml

defaultEntryPoints = ["http", "https"]

[web]
 address = ":8080"

[web.auth.basic]
 users = ["***"]

[entryPoints]
 [entryPoints.http]
  address = ":80"
  [entryPoints.http.redirect]
   entryPoint = "https"

 [entryPoints.https]
  address = ":443"
  [entryPoints.https.tls]


[acme]
 email = "ondra@ondrovo.com"
 storage = "acme.json"
 entryPoint = "https"
 onHostRule = true
 onDemand = false

 [acme.httpChallenge]
  entryPoint = "http"
  delayBeforeCheck = 0

 [[acme.domains]]
   main = "test.ondrovo.com"

[docker]
 endpoint = "unix:///var/run/docker.sock"
 domain = "docker.local"
 watch = true

traefic.compose.yml

version: '2'

services:
  proxy:
    image: traefik
    ports:
      - "80:80"
      - "443:443"
      - "8080:8080"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - ./traefik.toml:/traefik.toml
      - ./acme.json:/acme.json
    networks:
      - traefik
    labels:
      - "traefik.enable=false"

networks:
  traefik:
    external:
      name: traefik