traefik

traefik/traefik.yaml

@@ -0,0 +1,65 @@
+providers:
+  file:
+    directory: /etc/traefik/conf.d/
+
+entryPoints:
+  web:
+    address: ':80'
+    http:
+      redirections:
+        entryPoint:
+          to: websecure
+          scheme: https
+
+  websecure:
+    address: ':443'
+    http:
+      tls:
+        certResolver: letsencrypt
+
+  paperless:
+    address: ':5200'
+
+  traefik:
+    address: ':8080'
+
+  hass:
+    address: ':444'
+    http:
+      tls:
+        certResolver: letsencrypt
+      redirections:
+        entryPoint:
+          scheme: https
+
+certificatesResolvers:
+  letsencrypt:
+    acme:
+      email: "stefan@ostermail.de"
+      storage: /etc/traefik/ssl/acme.json
+      tlsChallenge: {}
+
+api:
+  dashboard: true
+  insecure: true
+
+log:
+  filePath: /var/log/traefik/traefik.log
+  format: json
+  level: INFO
+
+accessLog:
+  filePath: /var/log/traefik/traefik-access.log
+  format: json
+  filters:
+    statusCodes:
+      - "200"
+      - "400-599"
+    retryAttempts: true
+    minDuration: "10ms"
+  bufferingSize: 0
+  fields:
+    headers:
+      defaultMode: drop
+      names:
+        User-Agent: keep