traefik.mastodon.template.j2

http:
  routers:
    {{ fqdn }}-web-router:
      rule: "{{ traefik_host_rule }}"

      entryPoints:
        - web
      middlewares:
        - redirect
      service: {{ fqdn }}-web

    {{ fqdn }}-web-secure-router:
      rule: "{{ traefik_host_rule }}"

      entryPoints:
        - web-secure
      middlewares:
        - sslHeaders
        - gzip-compress
      service: {{ fqdn }}-web
      tls:
        certResolver: letsencrypt

    {{ fqdn }}-streaming-router:
      rule: "({{ traefik_host_rule }} && PathPrefix(`/api/v1/streaming`))"

      entryPoints:
        - web
      middlewares:
        - redirect
      service: {{ fqdn }}-streaming

    {{ fqdn }}-streaming-secure-router:
      rule: "({{ traefik_host_rule }} && PathPrefix(`/api/v1/streaming`))"

      entryPoints:
        - web-secure
      middlewares:
        - sslHeaders
      service: {{ fqdn }}-streaming
      tls:
        certResolver: letsencrypt

  middlewares:
    redirect:
      redirectScheme:
        scheme: https
        permanent: true
    sslHeaders:
      headers:
        customRequestHeaders:
          X-Forwarded-Proto: "https"
          X-Forwarded-Port: "443"
    gzip-compress:
      compress: {}

  services:
    {{ fqdn }}-web:
      loadBalancer:
        servers:
          - url: http://localhost:{{ web_port }}
    {{ fqdn }}-streaming:
      loadBalancer:
        servers:
          - url: http://localhost:{{ streaming_port }}