New API security

integration/fixtures/access_log_config.toml

@@ -22,6 +22,7 @@
     address = ":8008"
 
 [api]
+  insecure = true
 
 [providers]
   [providers.docker]

integration/fixtures/acme/acme_base.toml

@@ -31,6 +31,7 @@
 {{end}}
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/acme/acme_domains.toml

@@ -31,6 +31,7 @@
 {{end}}
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/acme/acme_multiple_resolvers.toml

@@ -31,6 +31,7 @@
 {{end}}
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/acme/acme_tcp.toml

@@ -31,6 +31,7 @@
 {{end}}
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/acme/acme_tls.toml

@@ -31,6 +31,7 @@
 {{end}}
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/acme/acme_tls_dynamic.toml

@@ -31,6 +31,7 @@
 {{end}}
 
 [api]
+  insecure = true
 
 [providers]
   [providers.file]

integration/fixtures/acme/acme_tls_multiple_entrypoints.toml

@@ -34,3 +34,4 @@
 {{end}}
 
 [api]
+  insecure = true

integration/fixtures/docker/minimal.toml

@@ -10,6 +10,7 @@
     address = ":8000"
 
 [api]
+  insecure = true
 
 [providers]
   [providers.docker]

integration/fixtures/docker/simple.toml

@@ -10,6 +10,7 @@
     address = ":8000"
 
 [api]
+  insecure = true
 
 [providers]
   [providers.docker]

integration/fixtures/grpc/config.toml

@@ -13,6 +13,7 @@
     address = ":4443"
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/grpc/config_h2c.toml

@@ -10,6 +10,7 @@
     address = ":8081"
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/grpc/config_h2c_termination.toml

@@ -10,6 +10,7 @@
     address = ":4443"
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/grpc/config_insecure.toml

@@ -13,6 +13,7 @@
     address = ":4443"
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/grpc/config_retry.toml

@@ -13,6 +13,7 @@
     address = ":4443"
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/healthcheck/multiple-entrypoints.toml

@@ -12,6 +12,7 @@
     address = ":9000"
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/healthcheck/port_overload.toml

@@ -10,6 +10,7 @@
     address = ":8000"
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/healthcheck/simple.toml

@@ -10,6 +10,7 @@
     address = ":8000"
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/https/clientca/https_1ca1config.toml

@@ -10,6 +10,7 @@
     address = ":4443"
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/https/clientca/https_2ca1config.toml

@@ -10,6 +10,7 @@
     address = ":4443"
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/https/clientca/https_2ca2config.toml

@@ -10,6 +10,7 @@
     address = ":4443"
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/https/dynamic_https_sni.toml

@@ -13,6 +13,7 @@
      address = ":8443"
 
 [api]
+  insecure = true
 
 [providers]
   [providers.file]

integration/fixtures/https/dynamic_https_sni_default_cert.toml

@@ -10,6 +10,7 @@
     address = ":4443"
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/https/https_redirect.toml

@@ -13,6 +13,7 @@
     address = ":8443"
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/https/https_sni.toml

@@ -10,6 +10,7 @@
     address = ":4443"
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/https/https_sni_case_insensitive_dynamic.toml

@@ -10,6 +10,7 @@
     address = ":4443"
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/https/https_sni_default_cert.toml

@@ -10,6 +10,7 @@
     address = ":4443"
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/https/https_sni_strict.toml

@@ -10,6 +10,7 @@
     address = ":4443"
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/https/https_tls_options.toml

@@ -10,6 +10,7 @@
     address = ":4443"
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/https/rootcas/https.toml

@@ -29,6 +29,7 @@ fblo6RBxUQ==
     address = ":8081"
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/https/rootcas/https_with_file.toml

@@ -14,6 +14,7 @@
     address = ":8081"
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/k8s_crd.toml

@@ -6,6 +6,7 @@
   level = "DEBUG"
 
 [api]
+  insecure = true
 
 [entryPoints]
   [entryPoints.footcp]

integration/fixtures/k8s_default.toml

@@ -3,6 +3,7 @@
   sendAnonymousUsage = false
 
 [api]
+  insecure = true
 
 [log]
   level = "DEBUG"

integration/fixtures/marathon/simple.toml

@@ -12,6 +12,7 @@
     address = ":9090"
 
 [api]
+  insecure = true
 
 [providers]
   [providers.marathon]

integration/fixtures/mirror.toml

@@ -3,6 +3,7 @@
   sendAnonymousUsage = false
 
 [api]
+  insecure = true
 
 [log]
   level = "DEBUG"

integration/fixtures/multiple_provider.toml

@@ -10,6 +10,7 @@
     address = ":8000"
 
 [api]
+  insecure = true
 
 [providers]
   [providers.docker]

integration/fixtures/multiprovider.toml

@@ -6,6 +6,7 @@
   level = "DEBUG"
 
 [api]
+  insecure = true
 
 [entryPoints]
   [entryPoints.web]
@@ -13,6 +14,7 @@
 
 [providers]
   [providers.rest]
+    insecure = true
 
   [providers.file]
     filename = "{{ .SelfFilename }}"

integration/fixtures/proxy-protocol/with.toml

@@ -12,6 +12,7 @@
       trustedIPs = ["{{.HaproxyIP}}"]
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/proxy-protocol/without.toml

@@ -12,6 +12,7 @@
       trustedIPs = ["1.2.3.4"]
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/ratelimit/simple.toml

@@ -3,6 +3,7 @@
   sendAnonymousUsage = false
 
 [api]
+  insecure = true
 
 [log]
   level = "DEBUG"

integration/fixtures/rest/simple.toml

@@ -10,6 +10,8 @@
     address = ":8000"
 
 [api]
+  insecure = true
 
 [providers]
   [providers.rest]
+  insecure = true

integration/fixtures/rest/simple_secure.toml

@@ -0,0 +1,27 @@
+[global]
+  checkNewVersion = false
+  sendAnonymousUsage = false
+
+[log]
+  level = "DEBUG"
+
+[entryPoints]
+  [entryPoints.web]
+    address = ":8000"
+
+[api]
+  insecure = true
+
+[providers.rest]
+
+[providers.file]
+  filename = "{{ .SelfFilename }}"
+
+[http.routers.rest]
+    rule="PathPrefix(`/secure`)"
+    service="rest@internal"
+    middlewares=["strip"]
+
+[http.middlewares.strip.stripPrefix]
+    prefixes = [ "/secure" ]
+    

integration/fixtures/retry/simple.toml

@@ -10,6 +10,7 @@
     address = ":8000"
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/router_errors.toml

@@ -10,6 +10,7 @@
     address = ":4443"
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/service_errors.toml

@@ -10,6 +10,7 @@
     address = ":4443"
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/simple_auth.toml

@@ -13,6 +13,7 @@
     address = ":8001"
 
 [api]
+  insecure = true
   middlewares = ["authentication@file"]
 
 [ping]

integration/fixtures/simple_hostresolver.toml

@@ -10,6 +10,7 @@
     address = ":8000"
 
 [api]
+  insecure = true
 
 [providers]
   [providers.docker]

integration/fixtures/simple_secure_api.toml

@@ -0,0 +1,25 @@
+[global]
+  checkNewVersion = false
+  sendAnonymousUsage = false
+
+[entryPoints]
+  [entryPoints.web]
+    address = ":8000"
+
+ [entryPoints.traefik]
+    address = ":8080"
+
+
+[api]
+
+[providers.file]
+  filename = "{{ .SelfFilename }}"
+
+[http.routers.api]
+    rule="PathPrefix(`/secure`)"
+    service="api@internal"
+    middlewares=["strip"]
+
+[http.middlewares.strip.stripPrefix]
+    prefixes = [ "/secure" ]
+    

integration/fixtures/simple_stats.toml

@@ -10,6 +10,7 @@
     address = ":8000"
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/simple_web.toml

@@ -10,3 +10,4 @@
     address = ":8000"
 
 [api]
+  insecure = true

integration/fixtures/simple_whitelist.toml

@@ -9,9 +9,10 @@
   [entryPoints.web]
     address = ":8000"
     [entryPoints.web.ForwardedHeaders]
-      insecure=true
+      insecure = true
 
 [api]
+  insecure = true
 
 [providers]
   [providers.docker]

integration/fixtures/tcp/catch-all-no-tls-with-https.toml

@@ -10,6 +10,7 @@
     address = ":8093"
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/tcp/catch-all-no-tls.toml

@@ -10,6 +10,7 @@
     address = ":8093"
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/tcp/mixed.toml

@@ -10,6 +10,7 @@
     address = ":8093"
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/tcp/multi-tls-options.toml

@@ -10,6 +10,7 @@
     address = ":8093"
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/tcp/non-tls-fallback.toml

@@ -10,6 +10,7 @@
     address = ":8093"
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/tcp/non-tls.toml

@@ -10,6 +10,7 @@
     address = ":8093"
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/timeout/forwarding_timeouts.toml

@@ -17,6 +17,7 @@
   format = "json"
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/timeout/keepalive.toml

@@ -13,6 +13,7 @@
     address = ":8000"
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/tlsclientheaders/simple.toml

@@ -13,6 +13,7 @@
     address = ":8443"
 
 [api]
+  insecure = true
 
 [providers]
   [providers.docker]

integration/fixtures/tracing/simple-jaeger-collector.toml

@@ -6,6 +6,7 @@
   level = "DEBUG"
 
 [api]
+  insecure = true
 
 [entryPoints]
   [entryPoints.web]

integration/fixtures/tracing/simple-jaeger.toml

@@ -6,6 +6,7 @@
   level = "DEBUG"
 
 [api]
+  insecure = true
 
 [entryPoints]
   [entryPoints.web]

integration/fixtures/tracing/simple-zipkin.toml

@@ -6,6 +6,7 @@
   level = "DEBUG"
 
 [api]
+  insecure = true
 
 [entryPoints]
   [entryPoints.web]

integration/fixtures/traefik_log_config.toml

@@ -14,6 +14,7 @@
     address = ":8000"
 
 [api]
+  insecure = true
   dashboard = false
 
 [providers]

integration/fixtures/websocket/config.toml

@@ -10,6 +10,7 @@
     address = ":8000"
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/websocket/config_https.toml

@@ -13,6 +13,7 @@
     address = ":8000"
 
 [api]
+  insecure = true
 
 [providers.file]
   filename = "{{ .SelfFilename }}"

integration/fixtures/wrr.toml

@@ -3,6 +3,7 @@
   sendAnonymousUsage = false
 
 [api]
+  insecure = true
 
 [log]
   level = "DEBUG"

integration/fixtures/wrr_sticky.toml

@@ -3,6 +3,7 @@
   sendAnonymousUsage = false
 
 [api]
+  insecure = true
 
 [log]
   level = "DEBUG"