---
# Configuration for DMZ reverse proxy servers
# These are public-facing proxies that route traffic to backend servers

traefik_mode: dmz
use_ssl: true
cert_mode: "selfsigned"  # Use 'acme' for production
enable_dashboard: true
log_level: DEBUG
traefik_network: proxy

# Backend servers to proxy (if empty, proxies to all backend_servers)
# This allows multiple DMZ proxies to handle different backend servers
# backend_servers_to_proxy:
#   - backend1
#   - backend2

# ACME configuration (uncomment for production with cert_mode: acme)
# ssl_email: "admin@example.com"
# ssl_cert_resolver: "dns"
# acme_dns_zone: "digitalboard._acme.digitalboard.ch."
# acme_dns_nameserver: "192.168.1.1:53"
# acme_tsig_key: "your-tsig-key-name"
# acme_tsig_secret: "your-tsig-secret"