infrastructure/ansible/roles/traefik/files/traefik.yml
2020-09-27 12:36:49 +01:00

59 lines
1.1 KiB
YAML

entryPoints:
web:
address: :80
proxyProtocol:
trustedIPs:
- "{{ wireguard.cidr }}"
web-secure:
address: :443
proxyProtocol:
trustedIPs:
- "{{ wireguard.cidr }}"
matrix:
address: :8448
proxyProtocol:
trustedIPs:
- "{{ wireguard.cidr }}"
traefik:
address: "{{ wireguard.clients[ansible_fqdn].ip }}:8080"
ping: {}
providers:
docker:
endpoint: unix:///var/run/docker.sock
watch: true
exposedByDefault: false
file:
filename: /etc/traefik/file-provider.yml
api:
dashboard: true
insecure: true
certificatesResolvers:
le:
acme:
email: hosting@theorangeone.net
storage: /etc/traefik/acme.json
dnsChallenge:
provider: cloudflare
delayBeforeCheck: 0
resolvers:
- 1.1.1.1:53
- 1.0.0.1:53
serversTransport:
insecureSkipVerify: true
metrics:
influxDB:
address: "{{ wireguard.clients[ansible_fqdn].ip }}:38089"
database: traefik
pushInterval: 30s
tls:
options:
default:
minVersion: VersionTLS12