knight
d6a3d9a3f6
- accessLog: field filtering to drop sensitive headers (Authorization) while keeping useful ones (User-Agent, Content-Type, Referer) - metrics: Prometheus endpoint with latency buckets (0.1, 0.3, 1.2, 5.0s) Aligned with core's observability config. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
69 lines
1.1 KiB
YAML
69 lines
1.1 KiB
YAML
global:
|
|
checkNewVersion: true
|
|
|
|
api:
|
|
dashboard: true
|
|
insecure: true
|
|
|
|
entryPoints:
|
|
http:
|
|
address: ":80"
|
|
proxyProtocol:
|
|
insecure: true
|
|
http:
|
|
redirections:
|
|
entryPoint:
|
|
to: https
|
|
scheme: https
|
|
https:
|
|
address: ":443"
|
|
proxyProtocol:
|
|
insecure: true
|
|
|
|
providers:
|
|
providersThrottleDuration: 2s
|
|
file:
|
|
directory: "/conf.d"
|
|
watch: true
|
|
docker:
|
|
watch: true
|
|
endpoint: "unix:///var/run/docker.sock"
|
|
exposedByDefault: false
|
|
network: web
|
|
|
|
certificatesResolvers:
|
|
http:
|
|
acme:
|
|
email: ${ACME_EMAIL}
|
|
storage: acme.json
|
|
httpChallenge:
|
|
entryPoint: http
|
|
|
|
log:
|
|
level: INFO
|
|
filePath: /var/log/traefik.log
|
|
format: json
|
|
|
|
accessLog:
|
|
filePath: /var/log/traefik_access.log
|
|
format: json
|
|
fields:
|
|
defaultMode: keep
|
|
names:
|
|
clientUsername: drop
|
|
headers:
|
|
defaultMode: keep
|
|
names:
|
|
User-Agent: keep
|
|
Authorization: drop
|
|
Content-Type: keep
|
|
Referer: keep
|
|
|
|
metrics:
|
|
prometheus:
|
|
buckets:
|
|
- 0.1
|
|
- 0.3
|
|
- 1.2
|
|
- 5.0
|