## static configuration

global:
  # Send anonymous usage data
  sendAnonymousUsage: false
  checkNewVersion: true

entryPoints:
  ftp:
    address: ":21"
  ssh:
    address: ":22"
  smtp:
    address: ":25"
  dns:
    address: ":53"
  http:
    address: ":80"
    forwardedHeaders:
      insecure: true
    http:
#      middlewares:                                                                   # CHANGE MADE HERE (BOUNCER ENABLED) !!!
#        - "crowdsec@file"                                                            # CHANGE MADE HERE (BOUNCER ENABLED) !!!
#        - "cloudflarewarp@file"                                                      # CHANGE MADE HERE (BOUNCER ENABLED) !!!
      redirections:
        entryPoint:
          to: https
          scheme: https
  pop3:
    address: ":110"
  imap:
    address: ":143"
  https:
    address: ":443"
    forwardedHeaders:
      insecure: true
#    http:
#      middlewares:                                                                   # CHANGE MADE HERE (BOUNCER ENABLED) !!!
#        - crowdsec@file
#        - "cloudflarewarp@file"                                                      # CHANGE MADE HERE (BOUNCER ENABLED) !!!
#      middlewares:
#        - secureHeaders@file
#      tls:
#        certResolver: letsencrypt
  smtp-ssl:
    address: ":465"
  starttls:
    address: ":587"
  imap-ssl:
    address: ":993"
  pop3-ssl:
    address: ":995"
  openvpn:
    address: ":1194/udp"
  mysql:
    address: ":3306"
  elasticsearch:
    address: ":9200"
  metrics:
    address: ":8181"

providers:
  docker:
    endpoint: "unix:///var/run/docker.sock"
    exposedByDefault: false
    watch: true
  file:
    directory: /etc/traefik/dynamic
    watch: true
  providersThrottleDuration: 10

certificatesResolvers:
  staging:
    acme:
      email: admin@tips-of-mine.fr
      storage: acme.json
      caServer: "https://acme-staging-v02.api.letsencrypt.org/directory"
      dnsChallenge:
        provider: staging
      tlschallenge: true
      httpChallenge:
        entryPoint: http
  production:
    acme:
      email: admin@tips-of-mine.fr
      storage: acme.json
      caServer: "https://acme-v02.api.letsencrypt.org/directory"
      dnsChallenge:
        provider: production
        resolvers:
          - "1.1.1.1:53"
          - "1.0.0.1:53"
      tlschallenge: true
      httpchallenge:
        entrypoint: http

api:
#  insecure: true
  dashboard: true

log:
  level: DEBUG
  filepath: "/var/log/traefik.log"
  format: json
#  default: "common"

accesslog:
  filepath: "/var/log/access.log"
  format: json
  bufferingSize: 100
#  format: common

# Ajout de la partie métrique qui concerne Prometheus
metrics:
  prometheus:
    # Nom du point d'entrée défini au dessus
    entryPoint: metrics
    # On configure la latence des métriques
    buckets:
      - 0.1
      - 0.3
      - 1.2
      - 5.0
    # Ajout des métriques sur les points d'entrée
    addEntryPointsLabels: true
    # Ajout des services
    addServicesLabels: true
    addRoutersLabels: true

experimental:
  plugins:
    crowdsec-bouncer-traefik-plugin:
      moduleName: "github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin"
      version: "v1.3.3"

    traefik-maintenance:
      moduleName: github.com/TRIMM/traefik-maintenance
      version: v1.0.1

    fail2ban:
      moduleName: "github.com/tomMoulard/fail2ban"
      version: "v0.8.3"

    sablier:
      moduleName: "github.com/acouvreur/sablier"
      version: "v1.8.0-beta.22"