{ pkgs, ... }:
let
  # FIXME: https://github.com/traefik/traefik/issues/4881
  traefik = pkgs.traefik.overrideAttrs (oldAttrs: {
    patches = oldAttrs.patches or [ ] ++ [
      (builtins.fetchurl {
        url = "https://github.com/traefik/traefik/commit/e877a94b2a759b93fc886cba53f5fa9bc1e973ed.patch";
        sha256 = "sha256:178s4m2jnvr081slvgv48b6g4sispfwj2k7mfwskcyry1g2nbfvb";
      })
    ];
  });
in
pkgs.dockerTools.buildImage {
  name = "traefik";
  fromImage = import ../base { inherit pkgs; };

  copyToRoot = pkgs.buildEnv {
    name = "root";
    paths = [ traefik ];
    pathsToLink = [ "/bin" ];
  };

  config = {
    Entrypoint = [ "traefik" ];
    ExposedPorts = {
      "80/tcp" = { };
    };
  };
}