# HexaHost GameCloud — Traefik static configuration
# Mount this file read-only when running the Traefik container on the control plane host.

global:
  checkNewVersion: false
  sendAnonymousUsage: false

api:
  dashboard: true
  insecure: false

log:
  level: INFO
  format: json

accessLog:
  format: json
  filters:
    statusCodes:
      - "400-599"

entryPoints:
  web:
    address: ":80"
    http:
      redirections:
        entryPoint:
          to: websecure
          scheme: https
          permanent: true
  websecure:
    address: ":443"
    http:
      tls:
        certResolver: letsencrypt
        domains:
          - main: "${WEB_HOST:-panel.example.net}"
          - main: "${API_HOST:-api.example.net}"

providers:
  docker:
    endpoint: unix:///var/run/docker.sock
    exposedByDefault: false
    network: traefik-network
    watch: true
  file:
    directory: /etc/traefik/dynamic
    watch: true

certificatesResolvers:
  letsencrypt:
    acme:
      email: "${ACME_EMAIL:-ops@example.net}"
      storage: /letsencrypt/acme.json
      httpChallenge:
        entryPoint: web

serversTransport:
  insecureSkipVerify: false