traefik_file_provider_demo_config.yml

entryPoints:
  web:
    address: ":80"
  websecure:
    address: ":443"

http:
  routers:
    myrouter:
      rule: "Host(`bchain.example.in`)"
      middlewares:
        - auth
      service: "goserver"
      entryPoints:
        - websecure
      tls:
        options: "myoptions"
        #certResolver: "myresolver"
        #domains:
        #  - main: "bchain.example.in"

    api:
      rule: "Host(`traefik.example.in`) && (PathPrefix(`/api`) || PathPrefix(`/dashboard`))"
      entryPoints:
        - websecure
      middlewares:
        - auth
      service: "api@internal"
      tls:
        certResolver: "myresolver"
        domains:
          - main: "traefik.example.in"

    api_http:
      entryPoints:
        - web
      rule: "Host(`traefik.example.in`) && (PathPrefix(`/api`) || PathPrefix(`/dashboard`))"
      middlewares:
        - auth
        - redirect-to-https
      service: "api@internal"

  middlewares:
    auth:
      basicAuth:
        users:
          - "test:XXXX"

    redirect-to-https:
      redirectScheme:
        scheme: "https"
        port: "443"
        permanent: true

  services:
    goserver:
      loadBalancer:
        servers:
          - url: "http://INSTANCE_PRIVATE-IP:8001"

  tls:
    certificates:
      - certFile: "/run/secrets/server.crt"
        keyFile: "/run/secrets/server.key"

    stores:
      default:
        defaultCertificate:
          certFile: "/run/secrets/server.crt"
          keyFile: "/run/secrets/server.key"

    options:
      myoptions:
        minVersion: "VersionTLS12"
        sniStrict: true