traefik.yaml

################################################
################################## observability
################################################

#----------------------: https://doc.traefik.io/traefik/contributing/data-collection/
global:
  checkNewVersion: true
  sendAnonymousUsage: true    # send anonymous usage data

#----------------------: https://doc.traefik.io/traefik/operations/api/
api:
  dashboard: true
  insecure: false    # control access via http://traefikIPv4:8080/dashboard/
  debug: false
  disableDashboardAd: true

#----------------------: https://doc.traefik.io/traefik/observability/access-logs/
accesslog:
#  filePath: "/var/log/traefik-access.log"
  addInternals: true
  bufferingSize: 128

#----------------------: https://doc.traefik.io/traefik/observability/logs/
log:
# filePath: "/var/log/traefik.log"
  level: DEBUG    # TRACE DEBUG INFO WARN ERROR FATAL PANIC
  maxAge: 48

#----------------------: https://doc.traefik.io/traefik/observability/metrics/overview/
metrics:
  addInternals: true

#----------------------: https://doc.traefik.io/traefik/observability/tracing/overview/
#tracing:
#  addInternals: true
#  otlp: {}

################################################
#################################### environment
################################################

#----------------------: https://doc.traefik.io/traefik/routing/entrypoints/
entryPoints:
  http:
    address: ":80"
    http:
      middlewares:
        - internal-hosts-endorsed
  https:
    address: ":443"
    http:
      middlewares:
        - internal-hosts-endorsed

#----------------------: https://doc.traefik.io/traefik/providers/overview/
providers:

#----------------------: https://doc.traefik.io/traefik/providers/docker/
#  docker:
#    exposedbydefault: false

#----------------------: https://doc.traefik.io/traefik/providers/file/
  file:
#    filename: /etc/traefik/dynamic.yaml    # when a specific file is desired
    directory: /etc/traefik/dynamic
    watch: true

#----------------------: https://doc.traefik.io/traefik/https/acme/
certificatesresolvers:
  cloudflare:
    acme:
      caServer: https://acme-v02.api.letsencrypt.org/directory            # prod
#      caServer: https://acme-staging-v02.api.letsencrypt.org/directory    # test
      email: [email protected]    # valid Cloudflare-account email
      storage: /etc/traefik/acme.json
      dnschallenge:
        provider: cloudflare
        resolvers:
          - "1.1.1.1:53"
          - "1.0.0.1:53"