# - - - - - HTTP - - - - - #

http:
  middlewares:
    auth:
      digestAuth:
        users:
          # User: root
          # Password: root
          - root:traefik:d73fbe874041cb3659ad7d8ca0415268
    compress:
      compress:
        defaultEncoding: gzip
        minResponseBodyBytes: 256
    headers:
      headers:
        browserXssFilter: true
        contentTypeNosniff: true
        forceSTSHeader: true
        referrerPolicy: strict-origin-when-cross-origin
        stsIncludeSubdomains: true
        stsSeconds: 31536000
    redirectscheme:
      redirectScheme:
        scheme: https
        permanent: true
  routers:
    catchall:
      entryPoints:
        - http
      middlewares:
        - compress
#        - redirectscheme
      priority: 1
      rule: HostRegexp(`^.*$`)
      service: catchall
#    catchall-tls:
#      entryPoints:
#        - https
#      middlewares:
#        - compress
#        - headers
#      priority: 1
#      rule: HostRegexp(`^.*$`)
#      service: catchall
#      tls: {}
    traefik:
      entryPoints:
        - http
      middlewares:
        - auth
        - compress
#        - redirectscheme
      priority: 2
      rule: Host(`localhost`)
      service: api@internal
#    traefik-tls:
#      entryPoints:
#        - https
#      middlewares:
#        - auth
#        - compress
#        - headers
#      priority: 2
#      rule: Host(`localhost`)
#      service: api@internal
#      tls: {}
  services:
    catchall:
      loadBalancer:
        servers:
          - url: http://localhost

# - - - - - TCP - - - - - #

#tcp:
#  routers:
#    acme:
#      rule: HostSNI(`*`)
#      service: acme
#      tls:
#        passthrough: true
#        certResolver: dns-01
#        domains:
#          - main: example.com
#            sans:
#              - '*.example.com'
#  services:
#    acme:
#      loadBalancer:
#        servers:
#          - address: localhost:80

# - - - - - TLS - - - - - #

#tls:
#  stores:
#    default:
#      defaultCertificate:
#        certFile: /etc/ssl/traefik/root.crt
#        keyFile: /etc/ssl/traefik/root.key