$ docker network create -d overlay --attachable my_log_net

or:

$ docker network create --opt encrypted --driver overlay --attachable my_log_net

and then:

$ docker stack deploy --compose-file=docker-compose.yml elk

Logstash Image at Docker Hub

Docs about Traefik, here.

Example:

$ touch acme.json ; chmod 0600 acme.json

$ docker run -d -v /var/run/docker.sock:/var/run/docker.sock -v $PWD/traefik.toml:/traefik.toml -v $PWD/acme.json:/acme.json -p 80:80 -p 443:443 --network my_log_net --name traefik traefik --docker

(use --network my_log_net for your traefik backends)

then make a safe ssh tunnel to Kibana:

$ ssh -L 5601:localhost:5601 user@<swarm manager host>

open http://localhost:5601