Files
system-config/system/hosts/mcp/containers/traefik/traefik.yaml

57 lines
1.1 KiB
YAML

entryPoints:
web:
address: ":80"
http:
redirections:
entrypoint:
to: websecure
scheme: https
websecure:
address: ":443"
http:
tls:
certResolver: letsencrypt
metrics:
address: ":8082"
asDefault: false
matrix-federation:
address: ":8448"
asDefault: false
http:
tls:
certResolver: letsencrypt
api:
insecure: true
providers:
docker:
exposedByDefault: false
file:
directory: /etc/traefik/dynamic
watch: true
certificatesResolvers:
letsencrypt:
acme:
email: drew.haven@gmail.com
storage: /etc/traefik/acme/acme.json
httpChallenge:
entryPoint: web
metrics:
prometheus:
addEntryPointsLabels: true
addServicesLabels: true
entryPoint: "metrics"
# Plugins must be defined in static config
# Configuration of the plugin is in traefik.nix because it contains secrets.
# TODO: Convert this whole file to a template in Nix
experimental:
plugins:
traefik-oidc-auth:
moduleName: "github.com/sevensolutions/traefik-oidc-auth"
version: "v0.13.0"