# Edge Traefik Static Configuration
# Managed by Ansible - do not edit manually
# This configuration proxies to backend servers on private network

api:
  dashboard: {{ traefik_dashboard_enabled | lower }}
{% if traefik_dashboard_enabled %}
  insecure: false
{% endif %}

entryPoints:
  web:
    address: ":80"
    http:
      redirections:
        entryPoint:
          to: websecure
          scheme: https

  websecure:
    address: ":443"
    http:
      tls:
        certResolver: letsencrypt

providers:
  # File provider for static backend configurations
  file:
    filename: /etc/traefik/dynamic.yml
    watch: true

certificatesResolvers:
  letsencrypt:
    acme:
      email: {{ traefik_acme_email }}
      storage: /letsencrypt/acme.json
{% if traefik_acme_staging %}
      caServer: https://acme-staging-v02.api.letsencrypt.org/directory
{% endif %}
      httpChallenge:
        entryPoint: web

log:
  level: INFO

accessLog:
  filePath: /var/log/traefik/access.log