api:
  dashboard: true

global:
  updaterCallbacks: [http://127.0.0.1:56714/callback]

providers:
  docker:
    constraints: '!Label(`traefik.host`, ``)'
    defaultRule: Host(`{{ index .Labels "traefik.host" }}.wzray.com`)
    exposedByDefault: true
    allowEmptyServices: true

certificatesResolvers:
  cloudflare:
    acme:
      email: security@wzray.com
      storage: /etc/certs/acme.json
      caServer: https://acme-v02.api.letsencrypt.org/directory
      dnsChallenge:
        provider: cloudflare

entryPoints:
  https:
    address: ':443'
    asDefault: true
    http:
      tls:
        certResolver: cloudflare
        domains:
          - main: wzray.com
            sans: ['*.wzray.com']

  ehttps:
    address: ':8443'
    proxyProtocol:
      trustedIPs:
        - 0.0.0.0/0
    http:
      tls:
        certResolver: cloudflare
        domains:
          - main: wzray.com
            sans: ['*.wzray.com']

  http:
    address: ':80'
    http:
      redirections:
        entryPoint:
          to: https
          scheme: https

# yaml-language-server: $schema=schema.json