# yaml-language-server: $schema=https://json.schemastore.org/traefik-v2.json

providers:
  docker:
    exposedByDefault: false
    network: reverse-proxy
    defaultRule: 'Host(`{{ index .Labels "com.docker.compose.service" }}.{{ env `NASCOMPOSE_DOMAIN` }}`)'
  file:
    directory: /etc/traefik/dynamic/

serverstransport:
  insecureskipverify: true

api:
  dashboard: true
  insecure: true
accessLog:
  filePath: /var/log/traefik/access.log
  format: json
  fields:
    defaultMode: keep
    names:
      StartLocal: drop
      ClientAddr: drop
    headers:
      defaultMode: drop
      names:
        Remote-User: keep
metrics:
  prometheus:
    addRoutersLabels: true
    entryPoint: metrics

certificatesResolvers:
  defaultResolver:
    acme:
      storage: /etc/traefik/acme/acme.json
      tlsChallenge: {}

entryPoints:
  web:
    address: :8080
    http:
      redirections:
        entryPoint:
          to: websecure
          scheme: https
          permanent: true
  websecure:
    address: :8443
    asDefault: true
    http:
      tls:
        certResolver: defaultResolver
      middlewares:
        - hsts@file
        - compress@file
    http3:
      advertisedPort: 443
  ssh:
    address: :8022
  ssh-tarpit:
    address: :8222
    transport:
      respondingTimeouts:
        readTimeout: 0
        idleTimeout: 0
  metrics:
    address: :9982
  traefik:
    address: :8081

global:
  sendAnonymousUsage: false