Ah yes as long as you do not want to use webhooks from external services no tunnel is needed. Great to hear that you like it!
Are there any security issues with basic auth? I thought always that it is still quite secure.
Here the basic swarm traefik setup:
https://keybase.pub/janober/swarm-setup.zip
Here also basic docker-compose setup:
https://keybase.pub/janober/compose-setup.zip
Both not tested in that exact configuration. But should theoretically work and should get you 95% there. If something is wrong please inform me. That I can fix it. Thanks!