global:
  checkNewVersion: true

api:
  dashboard: true
  insecure: true

entryPoints:
  http:
    address: ":80"
    proxyProtocol:
      insecure: true
    http:
      redirections:
        entryPoint:
          to: https
          scheme: https
  https:
    address: ":443"
    proxyProtocol:
      insecure: true

providers:
  providersThrottleDuration: 2s
  file:
    directory: "/conf.d"
    watch: true
  docker:
    watch: true
    endpoint: "unix:///var/run/docker.sock"
    exposedByDefault: false
    network: web

certificatesResolvers:
  http:
    acme:
      email: ${ACME_EMAIL}
      storage: acme.json
      httpChallenge:
        entryPoint: http

log:
  level: INFO
  filePath: /var/log/traefik.log
  format: json

accessLog:
  filePath: /var/log/traefik_access.log
  format: json
  fields:
    defaultMode: keep
    names:
      clientUsername: drop
    headers:
      defaultMode: keep
      names:
        User-Agent: keep
        Authorization: drop
        Content-Type: keep
        Referer: keep

metrics:
  prometheus:
    buckets:
      - 0.1
      - 0.3
      - 1.2
      - 5.0