providers:
  file:
    directory: /etc/traefik/conf.d/
    watch: true

entryPoints:
  web:
    address: ':80'
    http:
      redirections:
        entryPoint:
          to: websecure
          scheme: https
  websecure:
    address: ':443'
    http:
      tls:
        certResolver: letsencrypt
  traefik:
    address: ':8080'

certificatesResolvers:
  # letsencrypt:
  #   acme:
  #     email: "correl@gmail.com"
  #     storage: /etc/traefik/ssl/acme.json
  #     dnsChallenge:
  #       provider: route53
  #       delayBeforeCheck: 0
  fenix.lgbt:
    acme:
      email: "correl@gmail.com"
      storage: /etc/traefik/ssl/acme-fenix.lgbt.json
      dnsChallenge:
        provider: route53
        delayBeforeCheck: 0
  dyndns:
    acme:
      email: "correl@gmail.com"
      storage: /etc/traefik/ssl/acme-dyndns.json
      tlsChallenge: {}

api:
  dashboard: true
  insecure: true

log:
  filePath: /var/log/traefik/traefik.log
  format: json
  level: INFO

accessLog:
  filePath: /var/log/traefik/traefik-access.log
  format: json
  filters:
    statusCodes:
      - "200"
      - "400-599"
    retryAttempts: true
    minDuration: "10ms"
  bufferingSize: 0
  fields:
    headers:
      defaultMode: drop
      names:
        User-Agent: keep

metrics:
  prometheus: {}

experimental:
  plugins:
    traefik-plugin-blockuseragent:
      moduleName: "github.com/agence-gaya/traefik-plugin-blockuseragent"
      version: "v0.1.7"