142 lines
4.6 KiB
YAML
142 lines
4.6 KiB
YAML
# Traefik 3.x (YAML)
|
|
# Updated 2024-June-04
|
|
|
|
################################################################
|
|
# Global configuration - https://doc.traefik.io/traefik/reference/static-configuration/file/
|
|
################################################################
|
|
global:
|
|
checkNewVersion: true #false
|
|
sendAnonymousUsage: false
|
|
|
|
################################################################
|
|
# Entrypoints - https://doc.traefik.io/traefik/routing/entrypoints/
|
|
################################################################
|
|
entryPoints:
|
|
web:
|
|
address: ":80"
|
|
# Global HTTP to HTTPS redirection
|
|
http:
|
|
# middlewares:
|
|
# - crowdsec-bouncer@file
|
|
redirections:
|
|
entryPoint:
|
|
to: websecure
|
|
scheme: https
|
|
permanent: true
|
|
|
|
websecure:
|
|
address: ":443"
|
|
http:
|
|
# middlewares:
|
|
# - crowdsec-bouncer@file
|
|
tls:
|
|
options: tls-opts@file
|
|
certResolver: dns-cloudflare
|
|
domains:
|
|
- main: "{{env "DOMAINNAME0"}}"
|
|
sans:
|
|
- "*.{{env "DOMAINNAME0"}}"
|
|
- main: "{{env "DOMAINNAME1"}}"
|
|
sans:
|
|
- "*.{{env "DOMAINNAME1"}}"
|
|
- main: "{{env "DOMAINNAME2"}}"
|
|
sans:
|
|
- "*.{{env "DOMAINNAME2"}}"
|
|
- main: "{{env "DOMAINNAME3"}}"
|
|
sans:
|
|
- "*.{{env "DOMAINNAME3"}}"
|
|
forwardedHeaders:
|
|
trustedIPs:
|
|
# Cloudflare (https://www.cloudflare.com/ips-v4)
|
|
- "173.245.48.0/20"
|
|
- "103.21.244.0/22"
|
|
- "103.22.200.0/22"
|
|
- "103.31.4.0/22"
|
|
- "141.101.64.0/18"
|
|
- "108.162.192.0/18"
|
|
- "190.93.240.0/20"
|
|
- "188.114.96.0/20"
|
|
- "197.234.240.0/22"
|
|
- "198.41.128.0/17"
|
|
- "162.158.0.0/15"
|
|
- "104.16.0.0/13"
|
|
- "104.24.0.0/14"
|
|
- "172.64.0.0/13"
|
|
- "131.0.72.0/22"
|
|
- "104.16.0.0/13"
|
|
- "104.24.0.0/14"
|
|
# Local IPs
|
|
- "127.0.0.1/32"
|
|
- "10.0.0.0/8"
|
|
- "192.168.0.0/16"
|
|
- "172.16.0.0/12"
|
|
|
|
################################################################
|
|
# Logs - https://doc.traefik.io/traefik/observability/logs/
|
|
################################################################
|
|
log:
|
|
level: INFO # Options: DEBUG, PANIC, FATAL, ERROR (Default), WARN, and INFO
|
|
filePath: /logs/traefik-container.log # Default is to STDOUT
|
|
# format: json # Uses text format (common) by default
|
|
noColor: false # Recommended to be true when using common
|
|
maxSize: 100 # In megabytes
|
|
compress: true # gzip compression when rotating
|
|
|
|
################################################################
|
|
# Access logs - https://doc.traefik.io/traefik/observability/access-logs/
|
|
################################################################
|
|
accessLog:
|
|
addInternals: true # things like ping@internal
|
|
filePath: /logs/traefik-access.log # In the Common Log Format (CLF) by default
|
|
bufferingSize: 100 # Number of log lines
|
|
fields:
|
|
names:
|
|
StartUTC: drop # Write logs in Container Local Time instead of UTC
|
|
filters:
|
|
statusCodes:
|
|
- "204-299"
|
|
- "400-499"
|
|
- "500-599"
|
|
|
|
################################################################
|
|
# API and Dashboard
|
|
################################################################
|
|
api:
|
|
dashboard: true
|
|
# Rely on api@internal and Traefik with Middleware to control access
|
|
# insecure: true
|
|
|
|
################################################################
|
|
# Providers - https://doc.traefik.io/traefik/providers/docker/
|
|
################################################################
|
|
providers:
|
|
docker:
|
|
#endpoint: "unix:///var/run/docker.sock" # Comment if using socket-proxy
|
|
endpoint: "tcp://socket-proxy:2375" # Uncomment if using socket proxy
|
|
exposedByDefault: false
|
|
network: proxy # network to use for connections to all containers
|
|
# defaultRule: TODO
|
|
|
|
# Enable auto loading of newly created rules by watching a directory
|
|
file:
|
|
# Apps, LoadBalancers, TLS Options, Middlewares, Middleware Chains
|
|
directory: /config
|
|
watch: true
|
|
|
|
################################################################
|
|
# Let's Encrypt (ACME)
|
|
################################################################
|
|
certificatesResolvers:
|
|
dns-cloudflare:
|
|
acme:
|
|
email: "{{env "CF_API_EMAIL"}}"
|
|
storage: "/acme.json"
|
|
#caServer: "https://acme-staging-v02.api.letsencrypt.org/directory" # Comment out when going prod
|
|
dnsChallenge:
|
|
provider: cloudflare
|
|
#delayBeforeCheck: 30 # Default is 2m0s. This changes the delay (in seconds)
|
|
# Custom DNS server resolution
|
|
resolvers:
|
|
- "1.1.1.1:53"
|
|
- "8.8.8.8:53"
|