api:
  dashboard: true
  debug: true

entryPoints:
  traefik:
    address: ":8080"
    http:
      aliasHeadersStrategy: delete
      encodedCharacters:
        allowEncodedSlash: true
        allowEncodedBackSlash: true
        allowEncodedNullCharacter: true
        allowEncodedSemicolon: true
        allowEncodedPercent: true
        allowEncodedQuestionMark: true
        allowEncodedHash: true

  wireguard:
    address: ":51820/udp"
  web:
    address: ":80"
    http:
      aliasHeadersStrategy: delete
      encodedCharacters:
        allowEncodedSlash: false
        allowEncodedBackSlash: false
        allowEncodedNullCharacter: false
        allowEncodedSemicolon: false
        allowEncodedPercent: false
        allowEncodedQuestionMark: false
        allowEncodedHash: false
      redirections:
        entryPoint:
          to: websecure
          scheme: https
  websecure:
    address: ":443"
    http:
      aliasHeadersStrategy: delete
      encodedCharacters:
        allowEncodedSlash: false
        allowEncodedBackSlash: false
        allowEncodedNullCharacter: false
        allowEncodedSemicolon: false
        allowEncodedPercent: false
        allowEncodedQuestionMark: false
        allowEncodedHash: false
    http3: {}
  metrics:
    address: ":8082"
    http:
      aliasHeadersStrategy: delete
      encodedCharacters:
        allowEncodedSlash: false
        allowEncodedBackSlash: false
        allowEncodedNullCharacter: false
        allowEncodedSemicolon: false
        allowEncodedPercent: false
        allowEncodedQuestionMark: false
        allowEncodedHash: false
  homepage:
    address: ":8083"
    http:
      aliasHeadersStrategy: delete
      encodedCharacters:
        allowEncodedSlash: false
        allowEncodedBackSlash: false
        allowEncodedNullCharacter: false
        allowEncodedSemicolon: false
        allowEncodedPercent: false
        allowEncodedQuestionMark: false
        allowEncodedHash: false

metrics:
  prometheus:
    entryPoint: metrics
    addEntryPointsLabels: true
    addRoutersLabels: true

serversTransport:
  insecureSkipVerify: true

providers:
  docker:
    #endpoint: "unix:///var/run/docker.sock"
    endpoint: "tcp://socket-proxy:2375"
    exposedByDefault: false
    network: proxy
  file:
    filename: /config.yml
    watch: true

certificatesResolvers:
  letsencrypt:
    acme:
      #caServer: https://letsencrypt.org
      email: example@gmail.com
      storage: acme.json
      dnsChallenge:
        provider: duckdns
        propagation:
          disableChecks: true
          delayBeforeChecks: 60s
        resolvers:
          - "1.1.1.2:53"
          - "1.0.0.2:53"

  #cloudflare-resolver:
    #acme:
      #email: example@gmail.com
      #storage: acme.json
      #dnsChallenge:
        #provider: cloudflare
        #resolvers:
          #- "1.1.1.1:53"

log:
  level: "INFO"

accessLog:
  filePath: "/var/log/access/access.log"

ping: {}