Docker/traefik.yml

71 lines
1.3 KiB
YAML

api:
dashboard: true
debug: true
providers:
docker:
exposedbydefault: false
file:
filename: "/etc/traefik/static_config.yml"
watch: true
log:
level: ERROR
# filePath: /etc/traefik/log.json
# format: json
metrics:
influxDB:
address: 'influxdb:8089'
protocol: udp
database: traefik
pushInterval: 60s
addEntryPointsLabels: true
certificatesResolvers:
milvert:
acme:
email: simon@milvert.com
storage: "/letsencrypt/acme.json"
httpChallenge:
entryPoint: web
tlsChallenge: {}
peek:
acme:
email: simon@milvert.com
storage: "/letsencrypt/acme_peek.json"
httpChallenge:
entryPoint: web
tlsChallenge: {}
http:
middlewares:
redirect:
redirectScheme:
scheme: https
entryPoints:
web:
address: ":80"
web-secure:
address: ":443"
influx:
address: ":8086"
mqtt:
address: ":9001"
tls:
options:
default:
minVersion: VersionTLS12
sniStrict : true
cipherSuites:
- TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
- TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
- TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
- TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
- TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
- TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305