api:
  dashboard: true
  debug: true
entryPoints:
  http:
    asDefault: true
    address: ":{{ traefik.http_port }}"
    http:
      redirections:
        entryPoint:
          to: https
          scheme: https
  https:
    asDefault: true
    address: ":{{ traefik.https_port }}"
  {% if 2022 in traefik.expose_additional_ports -%}
  public_ssh:
    address: ":2022"
  {% endif -%}
serversTransport:
  insecureSkipVerify: true
providers:
  docker:
    endpoint: "unix:///var/run/docker.sock"
    exposedByDefault: false
    network: traefik_exposed
  file:
    directory: /config
# https://doc.traefik.io/traefik/reference/install-configuration/tls/certificate-resolvers/acme/
# https://go-acme.github.io/lego/dns/
certificatesResolvers:
  hetzner:
    acme:
      email: nikl.free44@gmail.com
      storage:  /certs/acme.json
      dnsChallenge:
        provider: "hetzner"
        resolvers:
            - "hydrogen.ns.hetzner.com"
  {% if traefik.duckdns_api_token -%}
  duckdns:
    acme:
      email: nikl.free44@gmail.com
      storage:  /certs/duckdns_acme.json
      dnsChallenge:
        provider: "duckdns"
        disablePropagationCheck: true
        delayBeforeCheck: 120s
        propagation:
          disableANSChecks: true
          requireAllRNS: true
        resolvers:
            - "8.8.8.8:53"
            - "1.1.1.1:53"
  {%- endif %}