log:
  level: INFO

providers:
  docker:
    network: traefik
    exposedByDefault: false
  file:
    directory: /etc/traefik/dynamic
    watch: true

global:
  sendAnonymousUsage: false

api:
  dashboard: true

entryPoints:
  openvpn:
    address: :1194

  web:
    address: :80
    http:
      redirections:
        entryPoint:
          to: websecure
          scheme: https

  websecure:
    address: :443
    http:
      encodedCharacters:
        allowEncodedSlash: {{ (('gitlab' in docker_services) or (traefik_encodedcharacters_allowEncodedSlash | default(false))) | lower }}
        allowEncodedBackSlash: {{ (traefik_encodedcharacters_allowEncodedBackSlash | default(false)) | lower }}
        allowEncodedNullCharacter: {{ (traefik_encodedcharacters_allowEncodedNullCharacter | default(false)) | lower }}
        allowEncodedSemicolon: {{ (traefik_encodedcharacters_allowEncodedSemicolon | default(false)) | lower }}
        allowEncodedPercent: {{ (traefik_encodedcharacters_allowEncodedPercent | default(false)) | lower }}
        allowEncodedQuestionMark: {{ (traefik_encodedcharacters_allowEncodedQuestionMark | default(false)) | lower }}
        allowEncodedHash: {{ (traefik_encodedcharacters_allowEncodedHash | default(false)) | lower }}

certificatesResolvers:
  letsencrypt:
    acme:
      email: {{ traefik_letsencrypt_email }}
      storage: /letsencrypt/acme.json
      tlschallenge: true