# log:
#   level: DEBUG

api:
  dashboard: true

global:
  updaterCallbacks:
    - 'http://10.161.8.2:8000/callback'

providers:
  docker:
    constraints: '!Label(`traefik.host`, ``)'
    defaultRule: Host(`{{ index .Labels "traefik.host" }}.wzray.com`)
    exposedByDefault: true
    allowEmptyServices: true

certificatesResolvers:
  cloudflare:
    acme:
      email: security@wzray.com
      storage: /etc/certs/acme.json
      caServer: https://acme-v02.api.letsencrypt.org/directory
      dnsChallenge:
        provider: cloudflare

entryPoints:
  https:
    address: ':443'
    asDefault: true
    http:
      middlewares:
        - pretty-errors
      tls:
        certResolver: cloudflare
        domains:
          - main: wzray.com
            sans: ['*.wzray.com']

  ehttps:
    address: ':8443'
    proxyProtocol:
      trustedIPs:
        - 0.0.0.0/0
    http:
      middlewares:
        - pretty-errors
      tls:
        certResolver: cloudflare
        domains:
          - main: wzray.com
            sans: ['*.wzray.com']

  http:
    address: ':80'
    http:
      redirections:
        entryPoint:
          to: https
          scheme: https

# yaml-language-server: $schema=https://json.schemastore.org/traefik-v3.json
# defualt schema doesn't permit asDefault property on entrypoints