infrastructure/ansible/plays/services/traefik/traefik.yaml

log:
  level: ERROR
metrics:
  prometheus:
    addEntryPointsLabels: true
    addServicesLabels: true
    addRoutersLabels: true
    entryPoint: metrics
providers:
  docker:
    exposedbydefault: false
  file:
    filename: /etc/traefik/dynamic.yaml
entryPoints:
  web:
    address: ":80"
    http:
      redirections:
        entryPoint:
          to: websecure
          scheme: https
          permanent: true
      middlewares:
        - "hsts@file"
  metrics:
    address: ":9091"
    http:
      middlewares:
        - "metrics-ipwhitelist@file"
  websecure:
    address: ":443"
    http:
      middlewares:
        - "hsts@file"
      tls:
        certResolver: letsencrypt

certificatesResolvers:
  letsencrypt:
    acme:
      email: webmaster@tobiasmanske.de
      storage: /acme/acme.json
      # caServer: "https://acme-staging-v02.api.letsencrypt.org/directory"
      tlsChallenge: true