Traefik.YAML

providers:
  file:
    directory: /etc/traefik/conf.d/
    watch: TRUE
entryPoints:
  web:
    address: ':80'
    http:
      redirections:
        entryPoint:
          to: websecure
          scheme: https
  websecure:
    address: ':443'
    forwardedHeaders:
      insecure: true
    http:
      tls:
        certResolver: letsencrypt
        domains:
        - "beukert.eu"
  traefik:
    address: ':8080'
  matrix-federation:
    address: ':8448'
    forwardedHeaders:
      insecure: true
certificatesResolvers:
  letsencrypt:
    acme:
      email: "[email protected]"
      storage: /etc/traefik/ssl/acme.json
      #caServer: "https://acme-staging-v02.api.letsencrypt.org/directory"
      dnsChallenge:
        provider: hetzner
        resolvers:
        - "1.1.1.1"
api:
  dashboard: true
  insecure: true

log:
  filePath: /var/log/traefik/traefik.log
  format: json
  level: debug

accessLog:
  filePath: /var/log/traefik/traefik-access.log
  format: info
  filters:
    statusCodes:
      - "200"
      - "400-599"
    retryAttempts: true
    minDuration: "10ms"
  bufferingSize: 0
  fields:
#    headers:
#      defaultMode: drop
      names:
        User-Agent: keep

metrics:
  prometheus:
    addEntryPointsLabels: true
    addRoutersLabels: true
    addServicesLabels: true