New static configuration loading system.

Co-authored-by: Mathieu Lonjaret <mathieu.lonjaret@gmail.com>
2019-06-17 11:48:05 +02:00 · 2019-06-17 11:48:05 +02:00 · 8d7eccad5d
commit 8d7eccad5d
parent d18edd6f77
165 changed files with 10894 additions and 6076 deletions
--- a/docs/content/reference/static-configuration/cli.md
+++ b/docs/content/reference/static-configuration/cli.md
@ -0,0 +1,5 @@
+# Static Configuration: CLI
+
+```txt
+--8<-- "content/reference/static-configuration/cli.txt"
+```
--- a/docs/content/reference/static-configuration/cli.txt
+++ b/docs/content/reference/static-configuration/cli.txt
@ -0,0 +1,635 @@
+--accesslog  (Default: "false")
+    Access log settings.
+
+--accesslog.bufferingsize  (Default: "0")
+    Number of access log lines to process in a buffered way.
+
+--accesslog.fields.defaultmode  (Default: "keep")
+    Default mode for fields: keep | drop
+
+--accesslog.fields.headers.defaultmode  (Default: "keep")
+    Default mode for fields: keep | drop | redact
+
+--accesslog.fields.headers.names.<name>  (Default: "")
+    Override mode for headers
+
+--accesslog.fields.names.<name>  (Default: "")
+    Override mode for fields
+
+--accesslog.filepath  (Default: "")
+    Access log file path. Stdout is used when omitted or empty.
+
+--accesslog.filters.minduration  (Default: "0")
+    Keep access logs when request took longer than the specified duration.
+
+--accesslog.filters.retryattempts  (Default: "false")
+    Keep access logs when at least one retry happened.
+
+--accesslog.filters.statuscodes  (Default: "")
+    Keep access logs with status codes in the specified range.
+
+--accesslog.format  (Default: "common")
+    Access log format: json | common
+
+--acme.acmelogging  (Default: "false")
+    Enable debug logging of ACME actions.
+
+--acme.caserver  (Default: "https://acme-v02.api.letsencrypt.org/directory")
+    CA server to use.
+
+--acme.dnschallenge  (Default: "false")
+    Activate DNS-01 Challenge.
+
+--acme.dnschallenge.delaybeforecheck  (Default: "0")
+    Assume DNS propagates after a delay in seconds rather than finding and querying
+    nameservers.
+
+--acme.dnschallenge.disablepropagationcheck  (Default: "false")
+    Disable the DNS propagation checks before notifying ACME that the DNS challenge
+    is ready. [not recommended]
+
+--acme.dnschallenge.provider  (Default: "")
+    Use a DNS-01 based challenge provider rather than HTTPS.
+
+--acme.dnschallenge.resolvers  (Default: "")
+    Use following DNS servers to resolve the FQDN authority.
+
+--acme.domains  (Default: "")
+    The list of domains for which certificates are generated on startup. Wildcard
+    domains only accepted with DNSChallenge.
+
+--acme.domains[n].main  (Default: "")
+    Default subject name.
+
+--acme.domains[n].sans  (Default: "")
+    Subject alternative names.
+
+--acme.email  (Default: "")
+    Email address used for registration.
+
+--acme.entrypoint  (Default: "")
+    EntryPoint to use.
+
+--acme.httpchallenge  (Default: "false")
+    Activate HTTP-01 Challenge.
+
+--acme.httpchallenge.entrypoint  (Default: "")
+    HTTP challenge EntryPoint
+
+--acme.keytype  (Default: "RSA4096")
+    KeyType used for generating certificate private key. Allow value 'EC256',
+    'EC384', 'RSA2048', 'RSA4096', 'RSA8192'.
+
+--acme.onhostrule  (Default: "false")
+    Enable certificate generation on router Host rules.
+
+--acme.storage  (Default: "acme.json")
+    Storage to use.
+
+--acme.tlschallenge  (Default: "true")
+    Activate TLS-ALPN-01 Challenge.
+
+--api  (Default: "false")
+    Enable api/dashboard.
+
+--api.dashboard  (Default: "true")
+    Activate dashboard.
+
+--api.entrypoint  (Default: "traefik")
+    EntryPoint.
+
+--api.middlewares  (Default: "")
+    Middleware list.
+
+--api.statistics  (Default: "false")
+    Enable more detailed statistics.
+
+--api.statistics.recenterrors  (Default: "10")
+    Number of recent errors logged.
+
+--configfile  (Default: "")
+    Configuration file to use. If specified all other flags are ignored.
+
+--entrypoints.<name>  (Default: "false")
+    Entry points definition.
+
+--entrypoints.<name>.address  (Default: "")
+    Entry point address.
+
+--entrypoints.<name>.forwardedheaders.insecure  (Default: "false")
+    Trust all forwarded headers.
+
+--entrypoints.<name>.forwardedheaders.trustedips  (Default: "")
+    Trust only forwarded headers from selected IPs.
+
+--entrypoints.<name>.proxyprotocol  (Default: "false")
+    Proxy-Protocol configuration.
+
+--entrypoints.<name>.proxyprotocol.insecure  (Default: "false")
+    Trust all.
+
+--entrypoints.<name>.proxyprotocol.trustedips  (Default: "")
+    Trust only selected IPs.
+
+--entrypoints.<name>.transport.lifecycle.gracetimeout  (Default: "10")
+    Duration to give active requests a chance to finish before Traefik stops.
+
+--entrypoints.<name>.transport.lifecycle.requestacceptgracetimeout  (Default: "0")
+    Duration to keep accepting requests before Traefik initiates the graceful
+    shutdown procedure.
+
+--entrypoints.<name>.transport.respondingtimeouts.idletimeout  (Default: "180")
+    IdleTimeout is the maximum amount duration an idle (keep-alive) connection will
+    remain idle before closing itself. If zero, no timeout is set.
+
+--entrypoints.<name>.transport.respondingtimeouts.readtimeout  (Default: "0")
+    ReadTimeout is the maximum duration for reading the entire request, including
+    the body. If zero, no timeout is set.
+
+--entrypoints.<name>.transport.respondingtimeouts.writetimeout  (Default: "0")
+    WriteTimeout is the maximum duration before timing out writes of the response.
+    If zero, no timeout is set.
+
+--global.checknewversion  (Default: "true")
+    Periodically check if a new version has been released.
+
+--global.debug  (Default: "false")
+    Enable debug mode.
+
+--global.sendanonymoususage
+    Periodically send anonymous usage statistics. If the option is not specified, it
+    will be enabled by default.
+
+--hostresolver  (Default: "false")
+    Enable CNAME Flattening.
+
+--hostresolver.cnameflattening  (Default: "false")
+    A flag to enable/disable CNAME flattening
+
+--hostresolver.resolvconfig  (Default: "/etc/resolv.conf")
+    resolv.conf used for DNS resolving
+
+--hostresolver.resolvdepth  (Default: "5")
+    The maximal depth of DNS recursive resolving
+
+--log.filepath  (Default: "")
+    Traefik log file path. Stdout is used when omitted or empty.
+
+--log.format  (Default: "common")
+    Traefik log format: json | common
+
+--log.level  (Default: "ERROR")
+    Log level set to traefik logs.
+
+--metrics.datadog  (Default: "false")
+    DataDog metrics exporter type.
+
+--metrics.datadog.address  (Default: "localhost:8125")
+    DataDog's address.
+
+--metrics.datadog.pushinterval  (Default: "10")
+    DataDog push interval.
+
+--metrics.influxdb  (Default: "false")
+    InfluxDB metrics exporter type.
+
+--metrics.influxdb.address  (Default: "localhost:8089")
+    InfluxDB address.
+
+--metrics.influxdb.database  (Default: "")
+    InfluxDB database used when protocol is http.
+
+--metrics.influxdb.password  (Default: "")
+    InfluxDB password (only with http).
+
+--metrics.influxdb.protocol  (Default: "udp")
+    InfluxDB address protocol (udp or http).
+
+--metrics.influxdb.pushinterval  (Default: "10")
+    InfluxDB push interval.
+
+--metrics.influxdb.retentionpolicy  (Default: "")
+    InfluxDB retention policy used when protocol is http.
+
+--metrics.influxdb.username  (Default: "")
+    InfluxDB username (only with http).
+
+--metrics.prometheus  (Default: "false")
+    Prometheus metrics exporter type.
+
+--metrics.prometheus.buckets  (Default: "0.100000, 0.300000, 1.200000, 5.000000")
+    Buckets for latency metrics.
+
+--metrics.prometheus.entrypoint  (Default: "traefik")
+    EntryPoint.
+
+--metrics.prometheus.middlewares  (Default: "")
+    Middlewares.
+
+--metrics.statsd  (Default: "false")
+    StatsD metrics exporter type.
+
+--metrics.statsd.address  (Default: "localhost:8125")
+    StatsD address.
+
+--metrics.statsd.pushinterval  (Default: "10")
+    StatsD push interval.
+
+--ping  (Default: "false")
+    Enable ping.
+
+--ping.entrypoint  (Default: "traefik")
+    Ping entryPoint.
+
+--ping.middlewares  (Default: "")
+    Middleware list.
+
+--providers.docker  (Default: "false")
+    Enable Docker backend with default settings.
+
+--providers.docker.constraints  (Default: "")
+    Filter services by constraint, matching with Traefik tags.
+
+--providers.docker.constraints[n].key  (Default: "")
+    The provider label that will be matched against. In practice, it is always
+    'tag'.
+
+--providers.docker.constraints[n].mustmatch  (Default: "false")
+    Whether the matching operator is equals or not equals.
+
+--providers.docker.constraints[n].value  (Default: "")
+    The value that will be matched against.
+
+--providers.docker.defaultrule  (Default: "Host(`{{ normalize .Name }}`)")
+    Default rule.
+
+--providers.docker.endpoint  (Default: "unix:///var/run/docker.sock")
+    Docker server endpoint. Can be a tcp or a unix socket endpoint.
+
+--providers.docker.exposedbydefault  (Default: "true")
+    Expose containers by default.
+
+--providers.docker.network  (Default: "")
+    Default Docker network used.
+
+--providers.docker.swarmmode  (Default: "false")
+    Use Docker on Swarm Mode.
+
+--providers.docker.swarmmoderefreshseconds  (Default: "15")
+    Polling interval for swarm mode.
+
+--providers.docker.tls.ca  (Default: "")
+    TLS CA
+
+--providers.docker.tls.caoptional  (Default: "false")
+    TLS CA.Optional
+
+--providers.docker.tls.cert  (Default: "")
+    TLS cert
+
+--providers.docker.tls.insecureskipverify  (Default: "false")
+    TLS insecure skip verify
+
+--providers.docker.tls.key  (Default: "")
+    TLS key
+
+--providers.docker.usebindportip  (Default: "false")
+    Use the ip address from the bound port, rather than from the inner network.
+
+--providers.docker.watch  (Default: "true")
+    Watch provider.
+
+--providers.file  (Default: "false")
+    Enable File backend with default settings.
+
+--providers.file.debugloggeneratedtemplate  (Default: "false")
+    Enable debug logging of generated configuration template.
+
+--providers.file.directory  (Default: "")
+    Load configuration from one or more .toml files in a directory.
+
+--providers.file.filename  (Default: "")
+    Override default configuration template. For advanced users :)
+
+--providers.file.watch  (Default: "true")
+    Watch provider.
+
+--providers.kubernetes  (Default: "false")
+    Enable Kubernetes backend with default settings.
+
+--providers.kubernetes.certauthfilepath  (Default: "")
+    Kubernetes certificate authority file path (not needed for in-cluster client).
+
+--providers.kubernetes.disablepasshostheaders  (Default: "false")
+    Kubernetes disable PassHost Headers.
+
+--providers.kubernetes.endpoint  (Default: "")
+    Kubernetes server endpoint (required for external cluster client).
+
+--providers.kubernetes.ingressclass  (Default: "")
+    Value of kubernetes.io/ingress.class annotation to watch for.
+
+--providers.kubernetes.ingressendpoint.hostname  (Default: "")
+    Hostname used for Kubernetes Ingress endpoints.
+
+--providers.kubernetes.ingressendpoint.ip  (Default: "")
+    IP used for Kubernetes Ingress endpoints.
+
+--providers.kubernetes.ingressendpoint.publishedservice  (Default: "")
+    Published Kubernetes Service to copy status from.
+
+--providers.kubernetes.labelselector  (Default: "")
+    Kubernetes Ingress label selector to use.
+
+--providers.kubernetes.namespaces  (Default: "")
+    Kubernetes namespaces.
+
+--providers.kubernetes.token  (Default: "")
+    Kubernetes bearer token (not needed for in-cluster client).
+
+--providers.kubernetescrd  (Default: "false")
+    Enable Kubernetes backend with default settings.
+
+--providers.kubernetescrd.certauthfilepath  (Default: "")
+    Kubernetes certificate authority file path (not needed for in-cluster client).
+
+--providers.kubernetescrd.disablepasshostheaders  (Default: "false")
+    Kubernetes disable PassHost Headers.
+
+--providers.kubernetescrd.endpoint  (Default: "")
+    Kubernetes server endpoint (required for external cluster client).
+
+--providers.kubernetescrd.ingressclass  (Default: "")
+    Value of kubernetes.io/ingress.class annotation to watch for.
+
+--providers.kubernetescrd.labelselector  (Default: "")
+    Kubernetes label selector to use.
+
+--providers.kubernetescrd.namespaces  (Default: "")
+    Kubernetes namespaces.
+
+--providers.kubernetescrd.token  (Default: "")
+    Kubernetes bearer token (not needed for in-cluster client).
+
+--providers.marathon  (Default: "false")
+    Enable Marathon backend with default settings.
+
+--providers.marathon.basic.httpbasicauthuser  (Default: "")
+    Basic authentication User.
+
+--providers.marathon.basic.httpbasicpassword  (Default: "")
+    Basic authentication Password.
+
+--providers.marathon.constraints  (Default: "")
+    Filter services by constraint, matching with Traefik tags.
+
+--providers.marathon.constraints[n].key  (Default: "")
+    The provider label that will be matched against. In practice, it is always
+    'tag'.
+
+--providers.marathon.constraints[n].mustmatch  (Default: "false")
+    Whether the matching operator is equals or not equals.
+
+--providers.marathon.constraints[n].value  (Default: "")
+    The value that will be matched against.
+
+--providers.marathon.dcostoken  (Default: "")
+    DCOSToken for DCOS environment, This will override the Authorization header.
+
+--providers.marathon.defaultrule  (Default: "Host(`{{ normalize .Name }}`)")
+    Default rule.
+
+--providers.marathon.dialertimeout  (Default: "5")
+    Set a dialer timeout for Marathon.
+
+--providers.marathon.endpoint  (Default: "http://127.0.0.1:8080")
+    Marathon server endpoint. You can also specify multiple endpoint for Marathon.
+
+--providers.marathon.exposedbydefault  (Default: "true")
+    Expose Marathon apps by default.
+
+--providers.marathon.filtermarathonconstraints  (Default: "false")
+    Enable use of Marathon constraints in constraint filtering.
+
+--providers.marathon.forcetaskhostname  (Default: "false")
+    Force to use the task's hostname.
+
+--providers.marathon.keepalive  (Default: "10")
+    Set a TCP Keep Alive time.
+
+--providers.marathon.respectreadinesschecks  (Default: "false")
+    Filter out tasks with non-successful readiness checks during deployments.
+
+--providers.marathon.responseheadertimeout  (Default: "60")
+    Set a response header timeout for Marathon.
+
+--providers.marathon.tls.ca  (Default: "")
+    TLS CA
+
+--providers.marathon.tls.caoptional  (Default: "false")
+    TLS CA.Optional
+
+--providers.marathon.tls.cert  (Default: "")
+    TLS cert
+
+--providers.marathon.tls.insecureskipverify  (Default: "false")
+    TLS insecure skip verify
+
+--providers.marathon.tls.key  (Default: "")
+    TLS key
+
+--providers.marathon.tlshandshaketimeout  (Default: "5")
+    Set a TLS handshake timeout for Marathon.
+
+--providers.marathon.trace  (Default: "false")
+    Display additional provider logs.
+
+--providers.marathon.watch  (Default: "true")
+    Watch provider.
+
+--providers.providersthrottleduration  (Default: "2")
+    Backends throttle duration: minimum duration between 2 events from providers
+    before applying a new configuration. It avoids unnecessary reloads if multiples
+    events are sent in a short amount of time.
+
+--providers.rancher  (Default: "false")
+    Enable Rancher backend with default settings.
+
+--providers.rancher.constraints  (Default: "")
+    Filter services by constraint, matching with Traefik tags.
+
+--providers.rancher.constraints[n].key  (Default: "")
+    The provider label that will be matched against. In practice, it is always
+    'tag'.
+
+--providers.rancher.constraints[n].mustmatch  (Default: "false")
+    Whether the matching operator is equals or not equals.
+
+--providers.rancher.constraints[n].value  (Default: "")
+    The value that will be matched against.
+
+--providers.rancher.defaultrule  (Default: "Host(`{{ normalize .Name }}`)")
+    Default rule.
+
+--providers.rancher.enableservicehealthfilter  (Default: "true")
+    Filter services with unhealthy states and inactive states.
+
+--providers.rancher.exposedbydefault  (Default: "true")
+    Expose containers by default.
+
+--providers.rancher.intervalpoll  (Default: "false")
+    Poll the Rancher metadata service every 'rancher.refreshseconds' (less
+    accurate).
+
+--providers.rancher.prefix  (Default: "latest")
+    Prefix used for accessing the Rancher metadata service.
+
+--providers.rancher.refreshseconds  (Default: "15")
+    Defines the polling interval in seconds.
+
+--providers.rancher.watch  (Default: "true")
+    Watch provider.
+
+--providers.rest  (Default: "false")
+    Enable Rest backend with default settings.
+
+--providers.rest.entrypoint  (Default: "traefik")
+    EntryPoint.
+
+--serverstransport.forwardingtimeouts.dialtimeout  (Default: "30")
+    The amount of time to wait until a connection to a backend server can be
+    established. If zero, no timeout exists.
+
+--serverstransport.forwardingtimeouts.responseheadertimeout  (Default: "0")
+    The amount of time to wait for a server's response headers after fully writing
+    the request (including its body, if any). If zero, no timeout exists.
+
+--serverstransport.insecureskipverify  (Default: "false")
+    Disable SSL certificate verification.
+
+--serverstransport.maxidleconnsperhost  (Default: "200")
+    If non-zero, controls the maximum idle (keep-alive) to keep per-host. If zero,
+    DefaultMaxIdleConnsPerHost is used
+
+--serverstransport.rootcas  (Default: "")
+    Add cert file for self-signed certificate.
+
+--tracing  (Default: "false")
+    OpenTracing configuration.
+
+--tracing.backend  (Default: "jaeger")
+    Selects the tracking backend ('jaeger','zipkin','datadog','instana').
+
+--tracing.datadog  (Default: "false")
+    Settings for DataDog.
+
+--tracing.datadog.bagageprefixheadername  (Default: "")
+    Specifies the header name prefix that will be used to store baggage items in a
+    map.
+
+--tracing.datadog.debug  (Default: "false")
+    Enable DataDog debug.
+
+--tracing.datadog.globaltag  (Default: "")
+    Key:Value tag to be set on all the spans.
+
+--tracing.datadog.localagenthostport  (Default: "localhost:8126")
+    Set datadog-agent's host:port that the reporter will used.
+
+--tracing.datadog.parentidheadername  (Default: "")
+    Specifies the header name that will be used to store the parent ID.
+
+--tracing.datadog.prioritysampling  (Default: "false")
+    Enable priority sampling. When using distributed tracing, this option must be
+    enabled in order to get all the parts of a distributed trace sampled.
+
+--tracing.datadog.samplingpriorityheadername  (Default: "")
+    Specifies the header name that will be used to store the sampling priority.
+
+--tracing.datadog.traceidheadername  (Default: "")
+    Specifies the header name that will be used to store the trace ID.
+
+--tracing.haystack  (Default: "false")
+    Settings for Haystack.
+
+--tracing.haystack.baggageprefixheadername  (Default: "")
+    specifies the header name prefix that will be used to store baggage items in a
+    map.
+
+--tracing.haystack.globaltag  (Default: "")
+    Key:Value tag to be set on all the spans.
+
+--tracing.haystack.localagenthost  (Default: "LocalAgentHost")
+    Set haystack-agent's host that the reporter will used.
+
+--tracing.haystack.localagentport  (Default: "35000")
+    Set haystack-agent's port that the reporter will used.
+
+--tracing.haystack.parentidheadername  (Default: "")
+    Specifies the header name that will be used to store the parent ID.
+
+--tracing.haystack.spanidheadername  (Default: "")
+    Specifies the header name that will be used to store the span ID.
+
+--tracing.haystack.traceidheadername  (Default: "")
+    Specifies the header name that will be used to store the trace ID.
+
+--tracing.instana  (Default: "false")
+    Settings for Instana.
+
+--tracing.instana.localagenthost  (Default: "localhost")
+    Set instana-agent's host that the reporter will used.
+
+--tracing.instana.localagentport  (Default: "42699")
+    Set instana-agent's port that the reporter will used.
+
+--tracing.instana.loglevel  (Default: "info")
+    Set instana-agent's log level. ('error','warn','info','debug')
+
+--tracing.jaeger  (Default: "false")
+    Settings for jaeger.
+
+--tracing.jaeger.gen128bit  (Default: "false")
+    Generate 128 bit span IDs.
+
+--tracing.jaeger.localagenthostport  (Default: "127.0.0.1:6831")
+    Set jaeger-agent's host:port that the reporter will used.
+
+--tracing.jaeger.propagation  (Default: "jaeger")
+    Which propgation format to use (jaeger/b3).
+
+--tracing.jaeger.samplingparam  (Default: "1.000000")
+    Set the sampling parameter.
+
+--tracing.jaeger.samplingserverurl  (Default: "http://localhost:5778/sampling")
+    Set the sampling server url.
+
+--tracing.jaeger.samplingtype  (Default: "const")
+    Set the sampling type.
+
+--tracing.jaeger.tracecontextheadername  (Default: "uber-trace-id")
+    Set the header to use for the trace-id.
+
+--tracing.servicename  (Default: "traefik")
+    Set the name for this service.
+
+--tracing.spannamelimit  (Default: "0")
+    Set the maximum character limit for Span names (default 0 = no limit).
+
+--tracing.zipkin  (Default: "false")
+    Settings for zipkin.
+
+--tracing.zipkin.debug  (Default: "false")
+    Enable Zipkin debug.
+
+--tracing.zipkin.httpendpoint  (Default: "http://localhost:9411/api/v1/spans")
+    HTTP Endpoint to report traces to.
+
+--tracing.zipkin.id128bit  (Default: "true")
+    Use Zipkin 128 bit root span IDs.
+
+--tracing.zipkin.samespan  (Default: "false")
+    Use Zipkin SameSpan RPC style traces.
+
+--tracing.zipkin.samplerate  (Default: "1.000000")
+    The rate between 0.0 and 1.0 of requests to trace.
--- a/docs/content/reference/static-configuration/env.md
+++ b/docs/content/reference/static-configuration/env.md
@ -0,0 +1,616 @@
+# Static Configuration: Environment variables
+
+`TRAEFIK_ACCESSLOG`:  
+Access log settings. (Default: ```false```)
+
+`TRAEFIK_ACCESSLOG_BUFFERINGSIZE`:  
+Number of access log lines to process in a buffered way. (Default: ```0```)
+
+`TRAEFIK_ACCESSLOG_FIELDS_DEFAULTMODE`:  
+Default mode for fields: keep | drop (Default: ```keep```)
+
+`TRAEFIK_ACCESSLOG_FIELDS_HEADERS_DEFAULTMODE`:  
+Default mode for fields: keep | drop | redact (Default: ```keep```)
+
+`TRAEFIK_ACCESSLOG_FIELDS_HEADERS_NAMES_<NAME>`:  
+Override mode for headers
+
+`TRAEFIK_ACCESSLOG_FIELDS_NAMES_<NAME>`:  
+Override mode for fields
+
+`TRAEFIK_ACCESSLOG_FILEPATH`:  
+Access log file path. Stdout is used when omitted or empty.
+
+`TRAEFIK_ACCESSLOG_FILTERS_MINDURATION`:  
+Keep access logs when request took longer than the specified duration. (Default: ```0```)
+
+`TRAEFIK_ACCESSLOG_FILTERS_RETRYATTEMPTS`:  
+Keep access logs when at least one retry happened. (Default: ```false```)
+
+`TRAEFIK_ACCESSLOG_FILTERS_STATUSCODES`:  
+Keep access logs with status codes in the specified range.
+
+`TRAEFIK_ACCESSLOG_FORMAT`:  
+Access log format: json | common (Default: ```common```)
+
+`TRAEFIK_ACME_ACMELOGGING`:  
+Enable debug logging of ACME actions. (Default: ```false```)
+
+`TRAEFIK_ACME_CASERVER`:  
+CA server to use. (Default: ```https://acme-v02.api.letsencrypt.org/directory```)
+
+`TRAEFIK_ACME_DNSCHALLENGE`:  
+Activate DNS-01 Challenge. (Default: ```false```)
+
+`TRAEFIK_ACME_DNSCHALLENGE_DELAYBEFORECHECK`:  
+Assume DNS propagates after a delay in seconds rather than finding and querying nameservers. (Default: ```0```)
+
+`TRAEFIK_ACME_DNSCHALLENGE_DISABLEPROPAGATIONCHECK`:  
+Disable the DNS propagation checks before notifying ACME that the DNS challenge is ready. [not recommended] (Default: ```false```)
+
+`TRAEFIK_ACME_DNSCHALLENGE_PROVIDER`:  
+Use a DNS-01 based challenge provider rather than HTTPS.
+
+`TRAEFIK_ACME_DNSCHALLENGE_RESOLVERS`:  
+Use following DNS servers to resolve the FQDN authority.
+
+`TRAEFIK_ACME_DOMAINS`:  
+The list of domains for which certificates are generated on startup. Wildcard domains only accepted with DNSChallenge.
+
+`TRAEFIK_ACME_DOMAINS[n]_MAIN`:  
+Default subject name.
+
+`TRAEFIK_ACME_DOMAINS[n]_SANS`:  
+Subject alternative names.
+
+`TRAEFIK_ACME_EMAIL`:  
+Email address used for registration.
+
+`TRAEFIK_ACME_ENTRYPOINT`:  
+EntryPoint to use.
+
+`TRAEFIK_ACME_HTTPCHALLENGE`:  
+Activate HTTP-01 Challenge. (Default: ```false```)
+
+`TRAEFIK_ACME_HTTPCHALLENGE_ENTRYPOINT`:  
+HTTP challenge EntryPoint
+
+`TRAEFIK_ACME_KEYTYPE`:  
+KeyType used for generating certificate private key. Allow value 'EC256', 'EC384', 'RSA2048', 'RSA4096', 'RSA8192'. (Default: ```RSA4096```)
+
+`TRAEFIK_ACME_ONHOSTRULE`:  
+Enable certificate generation on router Host rules. (Default: ```false```)
+
+`TRAEFIK_ACME_STORAGE`:  
+Storage to use. (Default: ```acme.json```)
+
+`TRAEFIK_ACME_TLSCHALLENGE`:  
+Activate TLS-ALPN-01 Challenge. (Default: ```true```)
+
+`TRAEFIK_API`:  
+Enable api/dashboard. (Default: ```false```)
+
+`TRAEFIK_API_DASHBOARD`:  
+Activate dashboard. (Default: ```true```)
+
+`TRAEFIK_API_ENTRYPOINT`:  
+EntryPoint. (Default: ```traefik```)
+
+`TRAEFIK_API_MIDDLEWARES`:  
+Middleware list.
+
+`TRAEFIK_API_STATISTICS`:  
+Enable more detailed statistics. (Default: ```false```)
+
+`TRAEFIK_API_STATISTICS_RECENTERRORS`:  
+Number of recent errors logged. (Default: ```10```)
+
+`TRAEFIK_CONFIGFILE`:  
+Configuration file to use. If specified all other flags are ignored. (Default: "")
+
+`TRAEFIK_ENTRYPOINTS_<NAME>`:  
+Entry points definition. (Default: ```false```)
+
+`TRAEFIK_ENTRYPOINTS_<NAME>_ADDRESS`:  
+Entry point address.
+
+`TRAEFIK_ENTRYPOINTS_<NAME>_FORWARDEDHEADERS_INSECURE`:  
+Trust all forwarded headers. (Default: ```false```)
+
+`TRAEFIK_ENTRYPOINTS_<NAME>_FORWARDEDHEADERS_TRUSTEDIPS`:  
+Trust only forwarded headers from selected IPs.
+
+`TRAEFIK_ENTRYPOINTS_<NAME>_PROXYPROTOCOL`:  
+Proxy-Protocol configuration. (Default: ```false```)
+
+`TRAEFIK_ENTRYPOINTS_<NAME>_PROXYPROTOCOL_INSECURE`:  
+Trust all. (Default: ```false```)
+
+`TRAEFIK_ENTRYPOINTS_<NAME>_PROXYPROTOCOL_TRUSTEDIPS`:  
+Trust only selected IPs.
+
+`TRAEFIK_ENTRYPOINTS_<NAME>_TRANSPORT_LIFECYCLE_GRACETIMEOUT`:  
+Duration to give active requests a chance to finish before Traefik stops. (Default: ```10```)
+
+`TRAEFIK_ENTRYPOINTS_<NAME>_TRANSPORT_LIFECYCLE_REQUESTACCEPTGRACETIMEOUT`:  
+Duration to keep accepting requests before Traefik initiates the graceful shutdown procedure. (Default: ```0```)
+
+`TRAEFIK_ENTRYPOINTS_<NAME>_TRANSPORT_RESPONDINGTIMEOUTS_IDLETIMEOUT`:  
+IdleTimeout is the maximum amount duration an idle (keep-alive) connection will remain idle before closing itself. If zero, no timeout is set. (Default: ```180```)
+
+`TRAEFIK_ENTRYPOINTS_<NAME>_TRANSPORT_RESPONDINGTIMEOUTS_READTIMEOUT`:  
+ReadTimeout is the maximum duration for reading the entire request, including the body. If zero, no timeout is set. (Default: ```0```)
+
+`TRAEFIK_ENTRYPOINTS_<NAME>_TRANSPORT_RESPONDINGTIMEOUTS_WRITETIMEOUT`:  
+WriteTimeout is the maximum duration before timing out writes of the response. If zero, no timeout is set. (Default: ```0```)
+
+`TRAEFIK_GLOBAL_CHECKNEWVERSION`:  
+Periodically check if a new version has been released. (Default: ```false```)
+
+`TRAEFIK_GLOBAL_DEBUG`:  
+Enable debug mode. (Default: ```false```)
+
+`TRAEFIK_GLOBAL_SENDANONYMOUSUSAGE`:  
+Periodically send anonymous usage statistics. If the option is not specified, it will be enabled by default.
+
+`TRAEFIK_HOSTRESOLVER`:  
+Enable CNAME Flattening. (Default: ```false```)
+
+`TRAEFIK_HOSTRESOLVER_CNAMEFLATTENING`:  
+A flag to enable/disable CNAME flattening (Default: ```false```)
+
+`TRAEFIK_HOSTRESOLVER_RESOLVCONFIG`:  
+resolv.conf used for DNS resolving (Default: ```/etc/resolv.conf```)
+
+`TRAEFIK_HOSTRESOLVER_RESOLVDEPTH`:  
+The maximal depth of DNS recursive resolving (Default: ```5```)
+
+`TRAEFIK_LOG_FILEPATH`:  
+Traefik log file path. Stdout is used when omitted or empty.
+
+`TRAEFIK_LOG_FORMAT`:  
+Traefik log format: json | common (Default: ```common```)
+
+`TRAEFIK_LOG_LEVEL`:  
+Log level set to traefik logs. (Default: ```ERROR```)
+
+`TRAEFIK_METRICS_DATADOG`:  
+DataDog metrics exporter type. (Default: ```false```)
+
+`TRAEFIK_METRICS_DATADOG_ADDRESS`:  
+DataDog's address. (Default: ```localhost:8125```)
+
+`TRAEFIK_METRICS_DATADOG_PUSHINTERVAL`:  
+DataDog push interval. (Default: ```10```)
+
+`TRAEFIK_METRICS_INFLUXDB`:  
+InfluxDB metrics exporter type. (Default: ```false```)
+
+`TRAEFIK_METRICS_INFLUXDB_ADDRESS`:  
+InfluxDB address. (Default: ```localhost:8089```)
+
+`TRAEFIK_METRICS_INFLUXDB_DATABASE`:  
+InfluxDB database used when protocol is http.
+
+`TRAEFIK_METRICS_INFLUXDB_PASSWORD`:  
+InfluxDB password (only with http).
+
+`TRAEFIK_METRICS_INFLUXDB_PROTOCOL`:  
+InfluxDB address protocol (udp or http). (Default: ```udp```)
+
+`TRAEFIK_METRICS_INFLUXDB_PUSHINTERVAL`:  
+InfluxDB push interval. (Default: ```10```)
+
+`TRAEFIK_METRICS_INFLUXDB_RETENTIONPOLICY`:  
+InfluxDB retention policy used when protocol is http.
+
+`TRAEFIK_METRICS_INFLUXDB_USERNAME`:  
+InfluxDB username (only with http).
+
+`TRAEFIK_METRICS_PROMETHEUS`:  
+Prometheus metrics exporter type. (Default: ```false```)
+
+`TRAEFIK_METRICS_PROMETHEUS_BUCKETS`:  
+Buckets for latency metrics. (Default: ```0.100000, 0.300000, 1.200000, 5.000000```)
+
+`TRAEFIK_METRICS_PROMETHEUS_ENTRYPOINT`:  
+EntryPoint. (Default: ```traefik```)
+
+`TRAEFIK_METRICS_PROMETHEUS_MIDDLEWARES`:  
+Middlewares.
+
+`TRAEFIK_METRICS_STATSD`:  
+StatsD metrics exporter type. (Default: ```false```)
+
+`TRAEFIK_METRICS_STATSD_ADDRESS`:  
+StatsD address. (Default: ```localhost:8125```)
+
+`TRAEFIK_METRICS_STATSD_PUSHINTERVAL`:  
+StatsD push interval. (Default: ```10```)
+
+`TRAEFIK_PING`:  
+Enable ping. (Default: ```false```)
+
+`TRAEFIK_PING_ENTRYPOINT`:  
+Ping entryPoint. (Default: ```traefik```)
+
+`TRAEFIK_PING_MIDDLEWARES`:  
+Middleware list.
+
+`TRAEFIK_PROVIDERS_DOCKER`:  
+Enable Docker backend with default settings. (Default: ```false```)
+
+`TRAEFIK_PROVIDERS_DOCKER_CONSTRAINTS`:  
+Filter services by constraint, matching with Traefik tags.
+
+`TRAEFIK_PROVIDERS_DOCKER_CONSTRAINTS[n]_KEY`:  
+The provider label that will be matched against. In practice, it is always 'tag'.
+
+`TRAEFIK_PROVIDERS_DOCKER_CONSTRAINTS[n]_MUSTMATCH`:  
+Whether the matching operator is equals or not equals. (Default: ```false```)
+
+`TRAEFIK_PROVIDERS_DOCKER_CONSTRAINTS[n]_VALUE`:  
+The value that will be matched against.
+
+`TRAEFIK_PROVIDERS_DOCKER_DEFAULTRULE`:  
+Default rule. (Default: ```Host(`{{ normalize .Name }}`)```)
+
+`TRAEFIK_PROVIDERS_DOCKER_ENDPOINT`:  
+Docker server endpoint. Can be a tcp or a unix socket endpoint. (Default: ```unix:///var/run/docker.sock```)
+
+`TRAEFIK_PROVIDERS_DOCKER_EXPOSEDBYDEFAULT`:  
+Expose containers by default. (Default: ```true```)
+
+`TRAEFIK_PROVIDERS_DOCKER_NETWORK`:  
+Default Docker network used.
+
+`TRAEFIK_PROVIDERS_DOCKER_SWARMMODE`:  
+Use Docker on Swarm Mode. (Default: ```false```)
+
+`TRAEFIK_PROVIDERS_DOCKER_SWARMMODEREFRESHSECONDS`:  
+Polling interval for swarm mode. (Default: ```15```)
+
+`TRAEFIK_PROVIDERS_DOCKER_TLS_CA`:  
+TLS CA
+
+`TRAEFIK_PROVIDERS_DOCKER_TLS_CAOPTIONAL`:  
+TLS CA.Optional (Default: ```false```)
+
+`TRAEFIK_PROVIDERS_DOCKER_TLS_CERT`:  
+TLS cert
+
+`TRAEFIK_PROVIDERS_DOCKER_TLS_INSECURESKIPVERIFY`:  
+TLS insecure skip verify (Default: ```false```)
+
+`TRAEFIK_PROVIDERS_DOCKER_TLS_KEY`:  
+TLS key
+
+`TRAEFIK_PROVIDERS_DOCKER_USEBINDPORTIP`:  
+Use the ip address from the bound port, rather than from the inner network. (Default: ```false```)
+
+`TRAEFIK_PROVIDERS_DOCKER_WATCH`:  
+Watch provider. (Default: ```true```)
+
+`TRAEFIK_PROVIDERS_FILE`:  
+Enable File backend with default settings. (Default: ```false```)
+
+`TRAEFIK_PROVIDERS_FILE_DEBUGLOGGENERATEDTEMPLATE`:  
+Enable debug logging of generated configuration template. (Default: ```false```)
+
+`TRAEFIK_PROVIDERS_FILE_DIRECTORY`:  
+Load configuration from one or more .toml files in a directory.
+
+`TRAEFIK_PROVIDERS_FILE_FILENAME`:  
+Override default configuration template. For advanced users :)
+
+`TRAEFIK_PROVIDERS_FILE_WATCH`:  
+Watch provider. (Default: ```true```)
+
+`TRAEFIK_PROVIDERS_KUBERNETES`:  
+Enable Kubernetes backend with default settings. (Default: ```false```)
+
+`TRAEFIK_PROVIDERS_KUBERNETESCRD`:  
+Enable Kubernetes backend with default settings. (Default: ```false```)
+
+`TRAEFIK_PROVIDERS_KUBERNETESCRD_CERTAUTHFILEPATH`:  
+Kubernetes certificate authority file path (not needed for in-cluster client).
+
+`TRAEFIK_PROVIDERS_KUBERNETESCRD_DISABLEPASSHOSTHEADERS`:  
+Kubernetes disable PassHost Headers. (Default: ```false```)
+
+`TRAEFIK_PROVIDERS_KUBERNETESCRD_ENDPOINT`:  
+Kubernetes server endpoint (required for external cluster client).
+
+`TRAEFIK_PROVIDERS_KUBERNETESCRD_INGRESSCLASS`:  
+Value of kubernetes.io/ingress.class annotation to watch for.
+
+`TRAEFIK_PROVIDERS_KUBERNETESCRD_LABELSELECTOR`:  
+Kubernetes label selector to use.
+
+`TRAEFIK_PROVIDERS_KUBERNETESCRD_NAMESPACES`:  
+Kubernetes namespaces.
+
+`TRAEFIK_PROVIDERS_KUBERNETESCRD_TOKEN`:  
+Kubernetes bearer token (not needed for in-cluster client).
+
+`TRAEFIK_PROVIDERS_KUBERNETES_CERTAUTHFILEPATH`:  
+Kubernetes certificate authority file path (not needed for in-cluster client).
+
+`TRAEFIK_PROVIDERS_KUBERNETES_DISABLEPASSHOSTHEADERS`:  
+Kubernetes disable PassHost Headers. (Default: ```false```)
+
+`TRAEFIK_PROVIDERS_KUBERNETES_ENDPOINT`:  
+Kubernetes server endpoint (required for external cluster client).
+
+`TRAEFIK_PROVIDERS_KUBERNETES_INGRESSCLASS`:  
+Value of kubernetes.io/ingress.class annotation to watch for.
+
+`TRAEFIK_PROVIDERS_KUBERNETES_INGRESSENDPOINT_HOSTNAME`:  
+Hostname used for Kubernetes Ingress endpoints.
+
+`TRAEFIK_PROVIDERS_KUBERNETES_INGRESSENDPOINT_IP`:  
+IP used for Kubernetes Ingress endpoints.
+
+`TRAEFIK_PROVIDERS_KUBERNETES_INGRESSENDPOINT_PUBLISHEDSERVICE`:  
+Published Kubernetes Service to copy status from.
+
+`TRAEFIK_PROVIDERS_KUBERNETES_LABELSELECTOR`:  
+Kubernetes Ingress label selector to use.
+
+`TRAEFIK_PROVIDERS_KUBERNETES_NAMESPACES`:  
+Kubernetes namespaces.
+
+`TRAEFIK_PROVIDERS_KUBERNETES_TOKEN`:  
+Kubernetes bearer token (not needed for in-cluster client).
+
+`TRAEFIK_PROVIDERS_MARATHON`:  
+Enable Marathon backend with default settings. (Default: ```false```)
+
+`TRAEFIK_PROVIDERS_MARATHON_BASIC_HTTPBASICAUTHUSER`:  
+Basic authentication User.
+
+`TRAEFIK_PROVIDERS_MARATHON_BASIC_HTTPBASICPASSWORD`:  
+Basic authentication Password.
+
+`TRAEFIK_PROVIDERS_MARATHON_CONSTRAINTS`:  
+Filter services by constraint, matching with Traefik tags.
+
+`TRAEFIK_PROVIDERS_MARATHON_CONSTRAINTS[n]_KEY`:  
+The provider label that will be matched against. In practice, it is always 'tag'.
+
+`TRAEFIK_PROVIDERS_MARATHON_CONSTRAINTS[n]_MUSTMATCH`:  
+Whether the matching operator is equals or not equals. (Default: ```false```)
+
+`TRAEFIK_PROVIDERS_MARATHON_CONSTRAINTS[n]_VALUE`:  
+The value that will be matched against.
+
+`TRAEFIK_PROVIDERS_MARATHON_DCOSTOKEN`:  
+DCOSToken for DCOS environment, This will override the Authorization header.
+
+`TRAEFIK_PROVIDERS_MARATHON_DEFAULTRULE`:  
+Default rule. (Default: ```Host(`{{ normalize .Name }}`)```)
+
+`TRAEFIK_PROVIDERS_MARATHON_DIALERTIMEOUT`:  
+Set a dialer timeout for Marathon. (Default: ```5```)
+
+`TRAEFIK_PROVIDERS_MARATHON_ENDPOINT`:  
+Marathon server endpoint. You can also specify multiple endpoint for Marathon. (Default: ```http://127.0.0.1:8080```)
+
+`TRAEFIK_PROVIDERS_MARATHON_EXPOSEDBYDEFAULT`:  
+Expose Marathon apps by default. (Default: ```true```)
+
+`TRAEFIK_PROVIDERS_MARATHON_FILTERMARATHONCONSTRAINTS`:  
+Enable use of Marathon constraints in constraint filtering. (Default: ```false```)
+
+`TRAEFIK_PROVIDERS_MARATHON_FORCETASKHOSTNAME`:  
+Force to use the task's hostname. (Default: ```false```)
+
+`TRAEFIK_PROVIDERS_MARATHON_KEEPALIVE`:  
+Set a TCP Keep Alive time. (Default: ```10```)
+
+`TRAEFIK_PROVIDERS_MARATHON_RESPECTREADINESSCHECKS`:  
+Filter out tasks with non-successful readiness checks during deployments. (Default: ```false```)
+
+`TRAEFIK_PROVIDERS_MARATHON_RESPONSEHEADERTIMEOUT`:  
+Set a response header timeout for Marathon. (Default: ```60```)
+
+`TRAEFIK_PROVIDERS_MARATHON_TLSHANDSHAKETIMEOUT`:  
+Set a TLS handshake timeout for Marathon. (Default: ```5```)
+
+`TRAEFIK_PROVIDERS_MARATHON_TLS_CA`:  
+TLS CA
+
+`TRAEFIK_PROVIDERS_MARATHON_TLS_CAOPTIONAL`:  
+TLS CA.Optional (Default: ```false```)
+
+`TRAEFIK_PROVIDERS_MARATHON_TLS_CERT`:  
+TLS cert
+
+`TRAEFIK_PROVIDERS_MARATHON_TLS_INSECURESKIPVERIFY`:  
+TLS insecure skip verify (Default: ```false```)
+
+`TRAEFIK_PROVIDERS_MARATHON_TLS_KEY`:  
+TLS key
+
+`TRAEFIK_PROVIDERS_MARATHON_TRACE`:  
+Display additional provider logs. (Default: ```false```)
+
+`TRAEFIK_PROVIDERS_MARATHON_WATCH`:  
+Watch provider. (Default: ```true```)
+
+`TRAEFIK_PROVIDERS_PROVIDERSTHROTTLEDURATION`:  
+Backends throttle duration: minimum duration between 2 events from providers before applying a new configuration. It avoids unnecessary reloads if multiples events are sent in a short amount of time. (Default: ```0```)
+
+`TRAEFIK_PROVIDERS_RANCHER`:  
+Enable Rancher backend with default settings. (Default: ```false```)
+
+`TRAEFIK_PROVIDERS_RANCHER_CONSTRAINTS`:  
+Filter services by constraint, matching with Traefik tags.
+
+`TRAEFIK_PROVIDERS_RANCHER_CONSTRAINTS[n]_KEY`:  
+The provider label that will be matched against. In practice, it is always 'tag'.
+
+`TRAEFIK_PROVIDERS_RANCHER_CONSTRAINTS[n]_MUSTMATCH`:  
+Whether the matching operator is equals or not equals. (Default: ```false```)
+
+`TRAEFIK_PROVIDERS_RANCHER_CONSTRAINTS[n]_VALUE`:  
+The value that will be matched against.
+
+`TRAEFIK_PROVIDERS_RANCHER_DEFAULTRULE`:  
+Default rule. (Default: ```Host(`{{ normalize .Name }}`)```)
+
+`TRAEFIK_PROVIDERS_RANCHER_ENABLESERVICEHEALTHFILTER`:  
+Filter services with unhealthy states and inactive states. (Default: ```true```)
+
+`TRAEFIK_PROVIDERS_RANCHER_EXPOSEDBYDEFAULT`:  
+Expose containers by default. (Default: ```true```)
+
+`TRAEFIK_PROVIDERS_RANCHER_INTERVALPOLL`:  
+Poll the Rancher metadata service every 'rancher.refreshseconds' (less accurate). (Default: ```false```)
+
+`TRAEFIK_PROVIDERS_RANCHER_PREFIX`:  
+Prefix used for accessing the Rancher metadata service. (Default: ```latest```)
+
+`TRAEFIK_PROVIDERS_RANCHER_REFRESHSECONDS`:  
+Defines the polling interval in seconds. (Default: ```15```)
+
+`TRAEFIK_PROVIDERS_RANCHER_WATCH`:  
+Watch provider. (Default: ```true```)
+
+`TRAEFIK_PROVIDERS_REST`:  
+Enable Rest backend with default settings. (Default: ```false```)
+
+`TRAEFIK_PROVIDERS_REST_ENTRYPOINT`:  
+EntryPoint. (Default: ```traefik```)
+
+`TRAEFIK_SERVERSTRANSPORT_FORWARDINGTIMEOUTS_DIALTIMEOUT`:  
+The amount of time to wait until a connection to a backend server can be established. If zero, no timeout exists. (Default: ```30```)
+
+`TRAEFIK_SERVERSTRANSPORT_FORWARDINGTIMEOUTS_RESPONSEHEADERTIMEOUT`:  
+The amount of time to wait for a server's response headers after fully writing the request (including its body, if any). If zero, no timeout exists. (Default: ```0```)
+
+`TRAEFIK_SERVERSTRANSPORT_INSECURESKIPVERIFY`:  
+Disable SSL certificate verification. (Default: ```false```)
+
+`TRAEFIK_SERVERSTRANSPORT_MAXIDLECONNSPERHOST`:  
+If non-zero, controls the maximum idle (keep-alive) to keep per-host. If zero, DefaultMaxIdleConnsPerHost is used (Default: ```0```)
+
+`TRAEFIK_SERVERSTRANSPORT_ROOTCAS`:  
+Add cert file for self-signed certificate.
+
+`TRAEFIK_TRACING`:  
+OpenTracing configuration. (Default: ```false```)
+
+`TRAEFIK_TRACING_BACKEND`:  
+Selects the tracking backend ('jaeger','zipkin','datadog','instana'). (Default: ```jaeger```)
+
+`TRAEFIK_TRACING_DATADOG`:  
+Settings for DataDog. (Default: ```false```)
+
+`TRAEFIK_TRACING_DATADOG_BAGAGEPREFIXHEADERNAME`:  
+Specifies the header name prefix that will be used to store baggage items in a map.
+
+`TRAEFIK_TRACING_DATADOG_DEBUG`:  
+Enable DataDog debug. (Default: ```false```)
+
+`TRAEFIK_TRACING_DATADOG_GLOBALTAG`:  
+Key:Value tag to be set on all the spans.
+
+`TRAEFIK_TRACING_DATADOG_LOCALAGENTHOSTPORT`:  
+Set datadog-agent's host:port that the reporter will used. (Default: ```localhost:8126```)
+
+`TRAEFIK_TRACING_DATADOG_PARENTIDHEADERNAME`:  
+Specifies the header name that will be used to store the parent ID.
+
+`TRAEFIK_TRACING_DATADOG_PRIORITYSAMPLING`:  
+Enable priority sampling. When using distributed tracing, this option must be enabled in order to get all the parts of a distributed trace sampled. (Default: ```false```)
+
+`TRAEFIK_TRACING_DATADOG_SAMPLINGPRIORITYHEADERNAME`:  
+Specifies the header name that will be used to store the sampling priority.
+
+`TRAEFIK_TRACING_DATADOG_TRACEIDHEADERNAME`:  
+Specifies the header name that will be used to store the trace ID.
+
+`TRAEFIK_TRACING_HAYSTACK`:  
+Settings for Haystack. (Default: ```false```)
+
+`TRAEFIK_TRACING_HAYSTACK_BAGGAGEPREFIXHEADERNAME`:  
+specifies the header name prefix that will be used to store baggage items in a map.
+
+`TRAEFIK_TRACING_HAYSTACK_GLOBALTAG`:  
+Key:Value tag to be set on all the spans.
+
+`TRAEFIK_TRACING_HAYSTACK_LOCALAGENTHOST`:  
+Set haystack-agent's host that the reporter will used. (Default: ```LocalAgentHost```)
+
+`TRAEFIK_TRACING_HAYSTACK_LOCALAGENTPORT`:  
+Set haystack-agent's port that the reporter will used. (Default: ```35000```)
+
+`TRAEFIK_TRACING_HAYSTACK_PARENTIDHEADERNAME`:  
+Specifies the header name that will be used to store the parent ID.
+
+`TRAEFIK_TRACING_HAYSTACK_SPANIDHEADERNAME`:  
+Specifies the header name that will be used to store the span ID.
+
+`TRAEFIK_TRACING_HAYSTACK_TRACEIDHEADERNAME`:  
+Specifies the header name that will be used to store the trace ID.
+
+`TRAEFIK_TRACING_INSTANA`:  
+Settings for Instana. (Default: ```false```)
+
+`TRAEFIK_TRACING_INSTANA_LOCALAGENTHOST`:  
+Set instana-agent's host that the reporter will used. (Default: ```localhost```)
+
+`TRAEFIK_TRACING_INSTANA_LOCALAGENTPORT`:  
+Set instana-agent's port that the reporter will used. (Default: ```42699```)
+
+`TRAEFIK_TRACING_INSTANA_LOGLEVEL`:  
+Set instana-agent's log level. ('error','warn','info','debug') (Default: ```info```)
+
+`TRAEFIK_TRACING_JAEGER`:  
+Settings for jaeger. (Default: ```false```)
+
+`TRAEFIK_TRACING_JAEGER_GEN128BIT`:  
+Generate 128 bit span IDs. (Default: ```false```)
+
+`TRAEFIK_TRACING_JAEGER_LOCALAGENTHOSTPORT`:  
+Set jaeger-agent's host:port that the reporter will used. (Default: ```127.0.0.1:6831```)
+
+`TRAEFIK_TRACING_JAEGER_PROPAGATION`:  
+Which propgation format to use (jaeger/b3). (Default: ```jaeger```)
+
+`TRAEFIK_TRACING_JAEGER_SAMPLINGPARAM`:  
+Set the sampling parameter. (Default: ```1.000000```)
+
+`TRAEFIK_TRACING_JAEGER_SAMPLINGSERVERURL`:  
+Set the sampling server url. (Default: ```http://localhost:5778/sampling```)
+
+`TRAEFIK_TRACING_JAEGER_SAMPLINGTYPE`:  
+Set the sampling type. (Default: ```const```)
+
+`TRAEFIK_TRACING_JAEGER_TRACECONTEXTHEADERNAME`:  
+Set the header to use for the trace-id. (Default: ```uber-trace-id```)
+
+`TRAEFIK_TRACING_SERVICENAME`:  
+Set the name for this service. (Default: ```traefik```)
+
+`TRAEFIK_TRACING_SPANNAMELIMIT`:  
+Set the maximum character limit for Span names (default 0 = no limit). (Default: ```0```)
+
+`TRAEFIK_TRACING_ZIPKIN`:  
+Settings for zipkin. (Default: ```false```)
+
+`TRAEFIK_TRACING_ZIPKIN_DEBUG`:  
+Enable Zipkin debug. (Default: ```false```)
+
+`TRAEFIK_TRACING_ZIPKIN_HTTPENDPOINT`:  
+HTTP Endpoint to report traces to. (Default: ```http://localhost:9411/api/v1/spans```)
+
+`TRAEFIK_TRACING_ZIPKIN_ID128BIT`:  
+Use Zipkin 128 bit root span IDs. (Default: ```true```)
+
+`TRAEFIK_TRACING_ZIPKIN_SAMESPAN`:  
+Use Zipkin SameSpan RPC style traces. (Default: ```false```)
+
+`TRAEFIK_TRACING_ZIPKIN_SAMPLERATE`:  
+The rate between 0.0 and 1.0 of requests to trace. (Default: ```1.000000```)
--- a/docs/content/reference/static-configuration/file.md
+++ b/docs/content/reference/static-configuration/file.md
@ -0,0 +1,7 @@
+# Static Configuration: File
+
+## TOML
+
+```toml
+--8<-- "content/reference/static-configuration/file.toml"
+```
--- a/docs/content/reference/static-configuration/file.toml
+++ b/docs/content/reference/static-configuration/file.toml
@ -0,0 +1,275 @@
+[Global]
+  Debug = true
+  CheckNewVersion = true
+  SendAnonymousUsage = true
+
+[ServersTransport]
+  InsecureSkipVerify = true
+  RootCAs = ["foobar", "foobar"]
+  MaxIdleConnsPerHost = 42
+  [ServersTransport.ForwardingTimeouts]
+    DialTimeout = 42
+    ResponseHeaderTimeout = 42
+
+[EntryPoints]
+
+  [EntryPoints.EntryPoint0]
+    Address = "foobar"
+    [EntryPoints.EntryPoint0.Transport]
+      [EntryPoints.EntryPoint0.Transport.LifeCycle]
+        RequestAcceptGraceTimeout = 42
+        GraceTimeOut = 42
+      [EntryPoints.EntryPoint0.Transport.RespondingTimeouts]
+        ReadTimeout = 42
+        WriteTimeout = 42
+        IdleTimeout = 42
+    [EntryPoints.EntryPoint0.ProxyProtocol]
+      Insecure = true
+      TrustedIPs = ["foobar", "foobar"]
+    [EntryPoints.EntryPoint0.ForwardedHeaders]
+      Insecure = true
+      TrustedIPs = ["foobar", "foobar"]
+
+[Providers]
+  ProvidersThrottleDuration = 42
+
+  [Providers.Docker]
+    Watch = true
+    Endpoint = "foobar"
+    DefaultRule = "foobar"
+    ExposedByDefault = true
+    UseBindPortIP = true
+    SwarmMode = true
+    Network = "foobar"
+    SwarmModeRefreshSeconds = 42
+
+    [[Providers.Docker.Constraints]]
+      Key = "foobar"
+      MustMatch = true
+      Regex = "foobar"
+
+    [[Providers.Docker.Constraints]]
+      Key = "foobar"
+      MustMatch = true
+      Regex = "foobar"
+
+    [Providers.Docker.TLS]
+      CA = "foobar"
+      CAOptional = true
+      Cert = "foobar"
+      Key = "foobar"
+      InsecureSkipVerify = true
+
+  [Providers.File]
+    Directory = "foobar"
+    Watch = true
+    Filename = "foobar"
+    DebugLogGeneratedTemplate = true
+    TraefikFile = "foobar"
+
+  [Providers.Marathon]
+    Trace = true
+    Watch = true
+    Endpoint = "foobar"
+    DefaultRule = "foobar"
+    ExposedByDefault = true
+    DCOSToken = "foobar"
+    FilterMarathonConstraints = true
+    DialerTimeout = 42
+    ResponseHeaderTimeout = 42
+    TLSHandshakeTimeout = 42
+    KeepAlive = 42
+    ForceTaskHostname = true
+    RespectReadinessChecks = true
+
+    [[Providers.Marathon.Constraints]]
+      Key = "foobar"
+      MustMatch = true
+      Regex = "foobar"
+
+    [[Providers.Marathon.Constraints]]
+      Key = "foobar"
+      MustMatch = true
+      Regex = "foobar"
+
+    [Providers.Marathon.TLS]
+      CA = "foobar"
+      CAOptional = true
+      Cert = "foobar"
+      Key = "foobar"
+      InsecureSkipVerify = true
+    [Providers.Marathon.Basic]
+      HTTPBasicAuthUser = "foobar"
+      HTTPBasicPassword = "foobar"
+
+  [Providers.Kubernetes]
+    Endpoint = "foobar"
+    Token = "foobar"
+    CertAuthFilePath = "foobar"
+    DisablePassHostHeaders = true
+    Namespaces = ["foobar", "foobar"]
+    LabelSelector = "foobar"
+    IngressClass = "foobar"
+    [Providers.Kubernetes.IngressEndpoint]
+      IP = "foobar"
+      Hostname = "foobar"
+      PublishedService = "foobar"
+
+  [Providers.KubernetesCRD]
+    Endpoint = "foobar"
+    Token = "foobar"
+    CertAuthFilePath = "foobar"
+    DisablePassHostHeaders = true
+    Namespaces = ["foobar", "foobar"]
+    LabelSelector = "foobar"
+    IngressClass = "foobar"
+
+  [Providers.Rest]
+    EntryPoint = "foobar"
+
+  [Providers.Rancher]
+    Watch = true
+    DefaultRule = "foobar"
+    ExposedByDefault = true
+    EnableServiceHealthFilter = true
+    RefreshSeconds = 42
+    IntervalPoll = true
+    Prefix = "foobar"
+
+    [[Providers.Rancher.Constraints]]
+      Key = "foobar"
+      MustMatch = true
+      Regex = "foobar"
+
+    [[Providers.Rancher.Constraints]]
+      Key = "foobar"
+      MustMatch = true
+      Regex = "foobar"
+
+[API]
+  EntryPoint = "foobar"
+  Dashboard = true
+  Middlewares = ["foobar", "foobar"]
+  [API.Statistics]
+    RecentErrors = 42
+
+[Metrics]
+
+  [Metrics.Prometheus]
+    Buckets = [42.0, 42.0]
+    EntryPoint = "foobar"
+    Middlewares = ["foobar", "foobar"]
+
+  [Metrics.Datadog]
+    Address = "foobar"
+    PushInterval = "foobar"
+
+  [Metrics.StatsD]
+    Address = "foobar"
+    PushInterval = "foobar"
+
+  [Metrics.InfluxDB]
+    Address = "foobar"
+    Protocol = "foobar"
+    PushInterval = "foobar"
+    Database = "foobar"
+    RetentionPolicy = "foobar"
+    Username = "foobar"
+    Password = "foobar"
+
+[Ping]
+  EntryPoint = "foobar"
+  Middlewares = ["foobar", "foobar"]
+
+[Log]
+  Level = "foobar"
+  FilePath = "foobar"
+  Format = "foobar"
+
+[AccessLog]
+  FilePath = "foobar"
+  Format = "foobar"
+  BufferingSize = 42
+  [AccessLog.Filters]
+    StatusCodes = ["foobar", "foobar"]
+    RetryAttempts = true
+    MinDuration = 42
+  [AccessLog.Fields]
+    DefaultMode = "foobar"
+    [AccessLog.Fields.Names]
+      name0 = "foobar"
+      name1 = "foobar"
+    [AccessLog.Fields.Headers]
+      DefaultMode = "foobar"
+      [AccessLog.Fields.Headers.Names]
+        name0 = "foobar"
+        name1 = "foobar"
+
+[Tracing]
+  Backend = "foobar"
+  ServiceName = "foobar"
+  SpanNameLimit = 42
+
+  [Tracing.Jaeger]
+    SamplingServerURL = "foobar"
+    SamplingType = "foobar"
+    SamplingParam = 42.0
+    LocalAgentHostPort = "foobar"
+    Gen128Bit = true
+    Propagation = "foobar"
+    TraceContextHeaderName = "foobar"
+
+  [Tracing.Zipkin]
+    HTTPEndpoint = "foobar"
+    SameSpan = true
+    ID128Bit = true
+    Debug = true
+    SampleRate = 42.0
+
+  [Tracing.DataDog]
+    LocalAgentHostPort = "foobar"
+    GlobalTag = "foobar"
+    Debug = true
+    PrioritySampling = true
+    TraceIDHeaderName = "foobar"
+    ParentIDHeaderName = "foobar"
+    SamplingPriorityHeaderName = "foobar"
+    BagagePrefixHeaderName = "foobar"
+
+  [Tracing.Instana]
+    LocalAgentHost = "foobar"
+    LocalAgentPort = 42
+    LogLevel = "foobar"
+
+[HostResolver]
+  CnameFlattening = true
+  ResolvConfig = "foobar"
+  ResolvDepth = 42
+
+[ACME]
+  Email = "foobar"
+  ACMELogging = true
+  CAServer = "foobar"
+  Storage = "foobar"
+  EntryPoint = "foobar"
+  KeyType = "foobar"
+  OnHostRule = true
+
+  [ACME.DNSChallenge]
+    Provider = "foobar"
+    DelayBeforeCheck = 42
+    Resolvers = ["foobar", "foobar"]
+    DisablePropagationCheck = true
+
+  [ACME.HTTPChallenge]
+    EntryPoint = "foobar"
+
+  [ACME.TLSChallenge]
+
+  [[ACME.Domains]]
+    Main = "foobar"
+    SANs = ["foobar", "foobar"]
+
+  [[ACME.Domains]]
+    Main = "foobar"
+    SANs = ["foobar", "foobar"]
--- a/docs/content/reference/static-configuration/overview.md
+++ b/docs/content/reference/static-configuration/overview.md
@ -0,0 +1,5 @@
+# Static Configuration
+
+- [File](./file.md)
+- [CLI](./cli.md)
+- [Environment Variables](./env.md)