Portainer Stack:
```yaml
---
version: "3.8"
services:
  swag:
    image: lscr.io/linuxserver/swag:latest
    container_name: swag
    network_mode: bridge
    cap_add:
      - NET_ADMIN
    environment:
      - PUID="${PUID-1000}"
      - PGID="${PGID-1000}"
      - TZ="${TZ-Europe/Amsterdam}"
      - URL=yourdomain.url
      - VALIDATION=dns
      - SUBDOMAINS=wildcard
      - CERTPROVIDER=zerossl
      - DNSPLUGIN=cloudflare
      - EMAIL=your_real@email.com
      - DHLEVEL=4096
      - DOCKER_HOST=dockerproxy
      - DOCKER_MODS=linuxserver/mods:swag-dbip|linuxserver/mods:swag-auto-reload|linuxserver/mods:swag-cloudflare-real-ip|linuxserver/mods:swag-dashboard
    volumes:
      - /docker/nginx:/config
    ports:
      - 443:443
      - 80:80
    restart: unless-stopped
    labels:
      - com.centurylinklabs.watchtower.enable=true

  dockerproxy:
    image: ghcr.io/tecnativa/docker-socket-proxy:latest
    container_name: dockerproxy
    network_mode: bridge
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
    restart: unless-stopped
    environment:
      - CONTAINERS=1
      - POST=0
    labels:
      - com.centurylinklabs.watchtower.enable=true
```

[More LinuxServer MODS](https://mods.linuxserver.io/?mod=swag)