version: "3.8"

services:
  agent:
    image: portainer/agent:latest
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - /var/lib/docker/volumes:/var/lib/docker/volumes
    networks:
      - agent_network
    ports:
      - target: 9001
        published: 9001
        protocol: tcp
        mode: host
    deploy:
      mode: global

  portainer:
    image: portainer/portainer-ce:latest
    command: --admin-password "$PORTAINER_ADMIN_PASSWORD_HASH"
    volumes:
      - portainer_data:/data
    networks:
      - agent_network
      - proxy_net
    deploy:
      replicas: 1
      placement:
        constraints:
          - node.labels.role == hp

networks:
  agent_network:
    driver: overlay
    attachable: true

  proxy_net:
    external: true

volumes:
  portainer_data: