http:
 #region routers
  routers:
    server1:
      entryPoints:
        - "https"
      rule: "Host(`server1.local.XXXX.net`)"
      middlewares:
        - default-headers
        - https-redirectscheme
      tls: {}
      service: server1
    pihole:

#endregion
#region services
  services:
    server1:
      loadBalancer:
        servers:
          - url: "https://192.168.1.17:82"
        passHostHeader: true
#endregion
  middlewares:
    https-redirectscheme:
      redirectScheme:
        scheme: https
        permanent: true
    default-headers:
      headers:
        frameDeny: true
        browserXssFilter: true
        contentTypeNosniff: true
        forceSTSHeader: true
        stsIncludeSubdomains: true
        stsPreload: true
        stsSeconds: 15552000
        customFrameOptionsValue: SAMEORIGIN
        customRequestHeaders:
          X-Forwarded-Proto: https

    default-whitelist:
      ipAllowList:
        sourceRange:
        - "10.0.0.0/8"
        - "192.168.0.0/16"
        - "172.16.0.0/12"

    secured:
      chain:
        middlewares:
        - default-whitelist
        - default-headers