log:
  level: {{ traefik_log_level }}

{% if traefik_enable_dashboard %}
api:
  dashboard: true
{% if not traefik_dashboard_domain %}
  insecure: true
{% endif %}
{% endif %}

{% if traefik_enable_access_logs %}
accessLog:
  format: {{ traefik_access_log_format }}
{% endif %}

entryPoints:
  web:
    address: ":80"
{% if traefik_use_ssl %}
    http:
      redirections:
        entryPoint:
          to: websecure
          scheme: https
{% endif %}
  websecure:
    address: ":443"

providers:
  file:
    directory: /config
    watch: true
{% if traefik_mode == 'backend' %}
  docker:
    endpoint: "unix:///var/run/docker.sock"
    network: {{ traefik_network }}
    exposedByDefault: false
{% endif %}

{% if traefik_use_ssl and traefik_cert_mode == 'acme' %}
certificatesResolvers:
  {{ traefik_ssl_cert_resolver }}:
    acme:
      email: {{ traefik_ssl_email }}
      storage: /letsencrypt/acme.json
      dnsChallenge:
        provider: rfc2136
        resolvers:
          - "{{ traefik_acme_dns_nameserver }}"
{% endif %}

{% if traefik_use_ssl %}
tls:
  options:
    default:
      minVersion: VersionTLS12
{% endif %}

global:
  checkNewVersion: false
  sendAnonymousUsage: false