# Edge Traefik Dynamic Configuration
# Managed by Ansible - do not edit manually
# Routes traffic to backend servers on private network

http:
  # Routers for white client
  routers:
    white-auth:
      rule: "Host(`auth.white.vrije.cloud`)"
      service: white-auth
      entryPoints:
        - websecure
      tls:
        certResolver: letsencrypt

    white-nextcloud:
      rule: "Host(`nextcloud.white.vrije.cloud`)"
      service: white-nextcloud
      entryPoints:
        - websecure
      tls:
        certResolver: letsencrypt

    white-collabora:
      rule: "Host(`office.white.vrije.cloud`)"
      service: white-collabora
      entryPoints:
        - websecure
      tls:
        certResolver: letsencrypt

    valk-auth:
      rule: "Host(`auth.valk.vrije.cloud`)"
      service: valk-auth
      entryPoints:
        - websecure
      tls:
        certResolver: letsencrypt

    valk-nextcloud:
      rule: "Host(`nextcloud.valk.vrije.cloud`)"
      service: valk-nextcloud
      entryPoints:
        - websecure
      tls:
        certResolver: letsencrypt

    valk-collabora:
      rule: "Host(`office.valk.vrije.cloud`)"
      service: valk-collabora
      entryPoints:
        - websecure
      tls:
        certResolver: letsencrypt

  # Services (backend servers)
  services:
    white-auth:
      loadBalancer:
        servers:
          - url: "https://10.0.0.40:443"
        serversTransport: insecureTransport

    white-nextcloud:
      loadBalancer:
        servers:
          - url: "https://10.0.0.40:443"
        serversTransport: insecureTransport

    white-collabora:
      loadBalancer:
        servers:
          - url: "https://10.0.0.40:443"
        serversTransport: insecureTransport

    valk-auth:
      loadBalancer:
        servers:
          - url: "https://10.0.0.41:443"
        serversTransport: insecureTransport

    valk-nextcloud:
      loadBalancer:
        servers:
          - url: "https://10.0.0.41:443"
        serversTransport: insecureTransport

    valk-collabora:
      loadBalancer:
        servers:
          - url: "https://10.0.0.41:443"
        serversTransport: insecureTransport

  # Server transport (allow self-signed certs from backends)
  serversTransports:
    insecureTransport:
      insecureSkipVerify: true