digitalboard.core/roles/traefik/templates/traefik.yml.j2
Bert-Jan Fikse 69bc95b992
chore: rename reverseproxy role to traffic
in case we get a nginx role oa in the future
2025-11-07 15:03:56 +01:00

62 lines
No EOL
1.1 KiB
Django/Jinja

log:
level: {{ log_level }}
{% if enable_dashboard %}
api:
dashboard: true
insecure: true
{% endif %}
{% if enable_access_logs %}
accessLog:
format: {{ access_log_format }}
{% endif %}
entryPoints:
web:
address: ":80"
{% if use_ssl %}
http:
redirections:
entryPoint:
to: websecure
scheme: https
{% endif %}
websecure:
address: ":443"
providers:
{% if traefik_mode == 'dmz' %}
file:
directory: /config
watch: true
{% endif %}
{% if traefik_mode == 'backend' %}
docker:
endpoint: "unix:///var/run/docker.sock"
network: {{ traefik_network }}
exposedByDefault: false
{% endif %}
{% if use_ssl and cert_mode == 'acme' %}
certificatesResolvers:
{{ ssl_cert_resolver }}:
acme:
email: {{ ssl_email }}
storage: /letsencrypt/acme.json
dnsChallenge:
provider: rfc2136
resolvers:
- "{{ acme_dns_nameserver }}"
{% endif %}
{% if use_ssl %}
tls:
options:
default:
minVersion: VersionTLS12
{% endif %}
global:
checkNewVersion: false
sendAnonymousUsage: false