This repository has been archived on 2022-11-03. You can view files and clone it, but cannot push or open issues or pull requests.
2020-04-13 13:33:14 +02:00
|
|
|
# traefik.yaml
|
|
|
|
providers:
|
|
|
|
docker:
|
|
|
|
exposedByDefault: false
|
|
|
|
file:
|
|
|
|
directory: /etc/traefik/
|
|
|
|
|
|
|
|
entryPoints:
|
|
|
|
websecure:
|
|
|
|
address: ":443"
|
|
|
|
|
|
|
|
certificatesResolvers:
|
|
|
|
myresolver:
|
|
|
|
acme:
|
|
|
|
email: "admin@example.ch"
|
|
|
|
storage: "/letsencrypt/acme.json"
|
|
|
|
tlsChallenge: true
|
2020-05-10 22:13:28 +02:00
|
|
|
caserver: "https://acme-staging-v02.api.letsencrypt.org/directory"
|
2020-04-13 13:33:14 +02:00
|
|
|
|
|
|
|
tls:
|
|
|
|
options:
|
|
|
|
default:
|
|
|
|
minVersion: VersionTLS12
|
|
|
|
sniStrict : true
|
|
|
|
cipherSuites:
|
|
|
|
- TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
|
|
|
|
- TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
|
|
|
|
- TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
|
|
|
|
- TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
|
|
|
|
- TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
|
|
|
|
- TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
|
|
|
|
curvePreferences:
|
|
|
|
- secp521r1
|
|
|
|
- secp384r1
|
|
|
|
|
|
|
|
mintls13:
|
|
|
|
minVersion: VersionTLS13
|
|
|
|
|
|
|
|
http:
|
|
|
|
middlewares:
|
|
|
|
default-headers:
|
|
|
|
headers:
|
|
|
|
frameDeny: true
|
|
|
|
browserXssFilter: true
|
|
|
|
contentTypeNosniff: true
|
|
|
|
forceSTSHeader: true
|
|
|
|
stsIncludeSubdomains: true
|
|
|
|
stsPreload: true
|
|
|
|
stsSeconds: 63072000
|