traefik.yml

@@ -0,0 +1,54 @@
+api:
+  dashboard: true
+
+global:
+  updaterCallbacks: [http://127.0.0.1:56714/callback]
+
+providers:
+  docker:
+    constraints: '!Label(`traefik.host`, ``)'
+    defaultRule: Host(`{{ index .Labels "traefik.host" }}.wzray.com`)
+    exposedByDefault: true
+    allowEmptyServices: true
+
+certificatesResolvers:
+  cloudflare:
+    acme:
+      email: security@wzray.com
+      storage: /etc/certs/acme.json
+      caServer: https://acme-v02.api.letsencrypt.org/directory
+      dnsChallenge:
+        provider: cloudflare
+
+entryPoints:
+  https:
+    address: ':443'
+    asDefault: true
+    http:
+      tls:
+        certResolver: cloudflare
+        domains:
+          - main: wzray.com
+            sans: ['*.wzray.com']
+
+  ehttps:
+    address: ':8443'
+    proxyProtocol:
+      trustedIPs:
+        - 0.0.0.0/0
+    http:
+      tls:
+        certResolver: cloudflare
+        domains:
+          - main: wzray.com
+            sans: ['*.wzray.com']
+
+  http:
+    address: ':80'
+    http:
+      redirections:
+        entryPoint:
+          to: https
+          scheme: https
+
+# yaml-language-server: $schema=schema.json