entryPoints:
  web:
    address: ":80"
    http:
      redirections:
        entrypoint:
          to: "websecure"
          scheme: "https"
          permanent: true

  ssh:
    address: ":2222"
      

  websecure:
    address: ":443"
    http:
      tls:
        domains:
          - main: "gerle.duckdns.org"
          - sans: "*.gerle.duckdns.org"

api:
  dashboard: true
  insecure: true

accessLog:
   filePath: "/logs/traefik_access.log"


log:
#  level: DEBUG
  filePath: "/logs/traefik.log"
   
providers:
  docker:
    watch: true
    network: "dockernet"
    exposedByDefault: false
  file:
    filename: "/etc/traefik/rules.yaml"
    watch: true

certificatesResolvers:
  letsencrypt:
    acme:
      email: team-gg@gmx.de
      storage: /letsencrypt/acme.json
      dnsChallenge:
        provider: duckdns
        delayBeforeCheck: 10
        # disablePropagationCheck: true
        resolvers:
        #   # - "99.79.143.35:53"
        #   # - "35.182.183.211:53"
          - "1.1.1.1:53"
          - "8.8.8.8:53"
  diskstation:
    acme:
      email: team-gg@gmx.de
      storage: /letsencrypt/acme_ds.json
#      tlsChallenge: {}
      httpChallenge:
        entryPoint: web