global:
  checkNewVersion: true
  sendAnonymousUsage: false
entryPoints:
  web:
    address: :80
  websecure:
    address: :443
    transport:
      respondingTimeouts:
        readTimeout: 600s
        idleTimeout: 600s
        writeTimeout: 600s
  metrics:
    address: :8082
  ssh:
    address: :2222
    transport:
      lifeCycle:
        graceTimeOut: 30s
      respondingTimeouts:
        idleTimeout: 3m
        readTimeout: 1m
api:
  dashboard: true
metrics:
  prometheus:
    entryPoint: metrics
    addEntryPointsLabels: true
    addServicesLabels: true
    manualRouting: true
log:
  level: INFO
  filePath: /var/log/traefik/traefik.log
accessLog:
  filePath: /var/log/traefik/access.log
providers:
  docker:
    endpoint: unix:///var/run/docker.sock
    exposedByDefault: false
  file:
    filename: /etc/traefik/traefik.yml
    watch: true
certificatesResolvers:
  variomedia:
    acme:
      email: tim@unkrig.dev
      storage: /letsencrypt/acme.json
      caServer: https://acme-v02.api.letsencrypt.org/directory
      dnsChallenge:
        provider: variomedia
        delayBeforeCheck: 0

http:
  routers:
    traefik:
      rule: Host(`traefik.unkrig.dev`)
      entryPoints:
        - websecure
      service: api@internal
      tls:
        certresolver: variomedia
    cloud_unkrig_dev:
      rule: Host(`cloud.unkrig.dev`)
      entryPoints:
        - websecure
      service: cloud_unkrig_dev
      tls:
        certresolver: variomedia
      middlewares:
        - nextcloud-headers
    git_unkrig_dev:
      rule: Host(`git.unkrig.dev`)
      entryPoints:
        - websecure
      service: git_unkrig_dev
      tls:
        certresolver: variomedia
    ha_unkrig_dev:
      rule: Host(`homeassistant.unkrig.dev`)
      entryPoints:
        - websecure
      service: ha_unkrig_dev
      tls:
        certresolver: variomedia
    rss_unkrig_dev:
      rule: Host(`rss.unkrig.dev`)
      entryPoints:
        - websecure
      service: rss_unkrig_dev
      tls:
        certresolver: variomedia
    auth_unkrig_dev:
      rule: Host(`auth.unkrig.dev`)
      entryPoints:
        - websecure
      service: auth_unkrig_dev
      tls:
        certresolver: variomedia
      middlewares:
        - auth-headers
    photos_unkrig_dev:
      rule: Host(`photos.unkrig.dev`)
      entryPoints:
        - websecure
      service: photos_unkrig_dev
      tls:
        certresolver: variomedia
      middlewares:
        - immich-headers

  services:
    cloud_unkrig_dev:
      loadBalancer:
        servers:
          - url: http://10.20.1.8:11000
    git_unkrig_dev:
      loadBalancer:
        servers:
          - url: http://10.20.1.6:2345
    ha_unkrig_dev:
      loadBalancer:
        servers:
          - url: http://10.20.1.20:8123
    rss_unkrig_dev:
      loadBalancer:
        servers:
          - url: http://10.20.1.1:80
    auth_unkrig_dev:
      loadBalancer:
        servers:
          - url: http://10.20.1.1:9000
    photos_unkrig_dev:
      loadBalancer:
        servers:
          - url: http://10.20.1.5:2283
  middlewares:
    nextcloud-headers:
      headers:
        hostsProxyHeaders:
          - X-Forwarded-Host
        referrerPolicy: same-origin
    auth-headers:
      headers:
        hostsProxyHeaders:
          - X-Forwarded-Host
        referrerPolicy: same-origin
    immich-headers:
      headers:
#        hostsProxyHeaders:
#          - X-Forwarded-Host
#        referrerPolicy: same-origin
        hostsProxyHeaders:
          - "X-Forwarded-Host"
        customRequestHeaders:
          X-Forwarded-Proto: "https"
        referrerPolicy: "same-origin"
        stsSeconds: 63072000
        stsIncludeSubdomains: true
        stsPreload: true
        forceSTSHeader: true

tcp:
  serversTransports:
    git_ssh_transport:
      terminationDelay: 300
  routers:
    git_ssh:
      entryPoints:
        - ssh
      service: git_ssh_service
      rule: HostSNI(`*`)
  services:
    git_ssh_service:
      loadBalancer:
        servers:
          - address: 10.20.1.6:2346
        serversTransport: git_ssh_transport