# traefik.yml
# yml file to define traefik global settings. Individual containers get lables to define their own settings
# Static config file loaded on boot, [[dynamic.yml]] has the dynamic config for container routing

api:
  dashboard: true
  # insecure: true

providers:
  docker:
    watch: true
    network: traefik
    # Do not expose every container automatically
    exposedByDefault: false
  file:
    filename: /etc/traefik/dynamic.yml
    watch: true

entryPoints:
  web:
    address: ":80"
    # Global HTTP -> HTTPS Redirection
    http:
      redirections:
        entryPoint:
          to: websecure
          scheme: https
  websecure:
    address: ":443"
    http:
      encodedCharacters:
        allowEncodedSlash: true
        allowEncodedHash: true  # This is crucial for Matrix room aliases!

        # Declaring the user list

certificatesResolvers:
  basic:
    acme:
      email: web-admin@riverrooks.art
      storage: /letsencrypt/acme.json
      # Use the TLS challenge for domain verification
      tlsChallenge: {}
  desecresolver:
    # TODO fix desecresolver  and dns cert partitioning
    acme:
      email: web-admin@riverrooks.art
      storage: /letsencrypt/acme.json
      dnsChallenge:
        provider: desec
        delayBeforeCheck: 15
        resolvers:
          - "1.1.1.1:53"
          - "8.8.8.8:53"