traefik/traefik.toml

[global]
  sendAnonymousUsage = false
  checkNewVersion = true

[entryPoints]
  [entryPoints.web]
    address = ":80"
    [entryPoints.web.http.redirections.entryPoint]
      to = "websecure"
      scheme = "https"
  [entryPoints.websecure]
    address = ":443"
    [entryPoints.websecure.http]
      middlewares = ["hardening@file", "compression@file"]
      [entryPoints.websecure.http.tls]
        certResolver = "letsencrypt"
        options = "tls12@file"
  [entryPoints.metrics]
    address = ":8082"

[providers]
  providersThrottleDuration = "2s"
  [providers.docker]
    watch = true
    endpoint = "unix:///var/run/docker.sock"
    exposedByDefault = false
    network = "proxy"
  [providers.file]
    filename = "/traefik_dynamic.toml"
    watch = true

[log]
  level = "INFO"

[accessLog]
  format = "json"
  [accessLog.fields.headers]
      defaultMode = "keep"
  # See https://doc.traefik.io/traefik/observability/access-logs/#time-zones
  [accessLog.fields.names]
      "StartUTC" = "drop"
      "ClientUsername" = "drop"

[certificatesResolvers]
  [certificatesResolvers.letsencrypt]
    [certificatesResolvers.letsencrypt.acme]
      email = "picasoft@assos.utc.fr"
      storage = "/certs/acme.json"
      [certificatesResolvers.letsencrypt.acme.httpChallenge]
        entryPoint = "web"

[metrics]
  [metrics.prometheus]
    entryPoint = "metrics"