# - - - - - HTTP - - - - - #

http:
  middlewares:
    auth:
      digestAuth:
        users:
          # User: root
          # Password: root
          - root:traefik:d73fbe874041cb3659ad7d8ca0415268
    compress:
      compress:
        defaultEncoding: gzip
        minResponseBodyBytes: 256
    headers:
      headers:
        browserXssFilter: true
        contentTypeNosniff: true
        forceSTSHeader: true
        referrerPolicy: strict-origin-when-cross-origin
        stsIncludeSubdomains: true
        stsSeconds: 31536000
    redirectscheme:
      redirectScheme:
        scheme: https
        permanent: true
  routers:
    catchall:
      entryPoints:
        - http
      middlewares:
        - compress
        - redirectscheme
      priority: 1
      rule: HostRegexp(`^.*$`)
      service: catchall
    catchall-tls:
      entryPoints:
        - https
      middlewares:
        - compress
        - headers
      priority: 1
      rule: HostRegexp(`^.*$`)
      service: catchall
      tls: {}
    traefik:
      entryPoints:
        - http
      middlewares:
        - auth
        - compress
        - redirectscheme
      priority: 2
      rule: Host(`localhost`)
      service: api@internal
    traefik-tls:
      entryPoints:
        - https
      middlewares:
        - auth
        - compress
        - headers
      priority: 2
      rule: Host(`localhost`)
      service: api@internal
      tls: {}
  services:
    catchall:
      loadBalancer:
        servers:
          - url: http://localhost

# - - - - - TCP - - - - - #

tcp:
  routers:
    acme:
      rule: HostSNI(`*`)
      service: acme
      tls:
        passthrough: true
        certResolver: dns-01
        domains:
          - main: example.com
            sans:
              - '*.example.com'
  services:
    acme:
      loadBalancer:
        servers:
          - address: localhost:80

# - - - - - TLS - - - - - #

tls:
  stores:
    default:
      defaultCertificate:
        certFile: /etc/ssl/traefik/root.crt
        keyFile: /etc/ssl/traefik/root.key