api:
  dashboard: true
  insecure: true   # keep false if exposing via router
ping: {}

log:
  level: INFO

accessLog:
  filePath: /logs/access.log
  format: json

entryPoints:
  web:
    address: ":80"
    http:
      redirections:
        entryPoint:
          to: websecure
          scheme: https

  websecure:
    address: ":443"
    http:
      middlewares:
        - default-chain@file

providers:
  docker:
    endpoint: "tcp://docker-socket-proxy:2375"
    exposedByDefault: false
  file:
    filename: /etc/traefik/dynamic.yml
    watch: true

experimental:
  plugins:
    crowdsec-bouncer:
      moduleName: github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin
      version: v1.4.2

certificatesResolvers:
  le:
    acme:
      email: wayne.bennett@live.com
      storage: /letsencrypt/acme.json
      httpChallenge:
        entryPoint: web
metrics:
  prometheus:
#    entryPoint: metrics:9100          # optional, default is "metrics"
    buckets:
      - 0.1
      - 0.3
      - 1.2
      - 5.0
    addEntryPointsLabels: true   # add labels for each entrypoint
    addServicesLabels: true      # add labels for each service