proxy/config/traefik.toml
2020-11-05 20:41:47 +01:00

65 lines
1.4 KiB
TOML

[global]
checkNewVersion = false
sendAnonymousUsage = false
[serversTransport]
insecureSkipVerify = true
[entryPoints]
[entryPoints.web]
address = ":80"
[entryPoints.websecure]
address = ":443"
[log]
level = "INFO"
[accessLog]
format = "common"
filePath = "/dev/null"
[api]
dashboard = true
[metrics]
[metrics.prometheus]
entryPoint = "traefik"
buckets = [0.1,0.3,1.2,5.0]
[ping]
[providers.docker]
network = "proxy_web"
exposedByDefault = false
defaultRule = "Host(`{{ normalize .Name }}.docker.localhost`)"
[certificatesResolvers.default.acme]
email = "hostmaster@zom.bi"
storage = "/cert/acme.json"
[certificatesResolvers.default.acme.httpChallenge]
entryPoint = "web"
[[tls.certificates]]
certFile = "cert/snakeoil.pem"
keyFile = "cert/snakeoil.key"
[[tls.certificates]]
certFile = "cert/bitmask.me.origin.pem"
keyFile = "cert/bitmask.me.origin.key"
[[tls.certificates]]
certFile = "cert/grun.host.origin.pem"
keyFile = "cert/grun.host.origin.key"
[tls.options]
[tls.options.default]
minVersion = "VersionTLS12"
cipherSuites = [
"TLS_CHACHA20_POLY1305_SHA256",
"TLS_AES_128_GCM_SHA256",
"TLS_AES_256_GCM_SHA384",
"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256",
"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"
]
[tls.options.mintls13]
minVersion = "VersionTLS13"