---
# Configuration for DMZ reverse proxy servers
# These are public-facing proxies that route traffic to backend servers

traefik_mode: dmz
traefik_use_ssl: true
traefik_cert_mode: "selfsigned"  # Use 'acme' for production
traefik_enable_dashboard: true
traefik_dashboard_domain: "traefik.dmz.local.test"
traefik_log_level: DEBUG
traefik_network: proxy

# Backend servers to proxy (if empty, proxies to all backend_servers)
# This allows multiple DMZ proxies to handle different backend servers
# traefik_backend_servers_to_proxy:
#   - backend1
#   - backend2

# ACME configuration (uncomment for production with traefik_cert_mode: acme)
# traefik_ssl_email: "admin@example.com"
# traefik_ssl_cert_resolver: "dns"
# traefik_acme_dns_zone: "digitalboard._acme.digitalboard.ch."
# traefik_acme_dns_nameserver: "192.168.1.1:53"
# traefik_acme_tsig_key: "your-tsig-key-name"
# traefik_acme_tsig_secret: "your-tsig-secret"