traefik.toml.sample

#Traefik Global Configuration
debug = false
checkNewVersion = false

logLevel = "INFO"

#Define the EntryPoint for HTTP and HTTPS
defaultEntryPoints = ["https", "http"]

#Define the HTTP port 80 and
#HTTPS port 443 EntryPoint
#Enable automatically redirect HTTP to HTTPS
[entryPoints]
  [entryPoints.http]
    address = ":80"
    [entryPoints.http.redirect]
      entryPoint = "https"
  [entryPoints.https]
    address = ":443"
    [entryPoints.https.tls]
      minVersion = "VersionTLS12"
      cipherSuites = [
        "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
        "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
        "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305",
        "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305",
        "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
        "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
        "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256",
        "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256"
      ]

[api]

#Enable retry sending a request if the network error
[retry]

#Define Docker Backend Configuration
[docker]
  endpoint = "unix:///var/run/docker.sock"
  domain = "$DOMAIN"
  watch = true
  exposedByDefault = false
  network = "$NETWORK"

#Letsencrypt Registration
#Define the Letsencrypt ACME HTTP challenge
[acme]
  email = "$EMAIL"
  storage = "acme.json"
  entryPoint = "https"
  #caServer = "https://acme-staging-v02.api.letsencrypt.org/directory"
  OnHostRule = true
  [acme.httpChallenge]
    entryPoint = "http"

[traefikLog]
  filePath = "/var/log/apache2/traefik.log"

[accessLog]
  filePath = "/var/log/apache2/access.log"
  bufferingSize = 100