config.example.yml

# Autocert (choose one below and uncomment to enable)
#
# 1. use existing cert
#
# autocert:
#   provider: local
#
#   cert_path: certs/cert.crt         # optional, uncomment only if you need to change it
#   key_path: certs/priv.key          # optional, uncomment only if you need to change it
#
# 2. cloudflare
#
# autocert:
#   provider: cloudflare
#   email: abc@gmail.com                            # ACME Email
#   domains:                                        # a list of domains for cert registration
#     - "*.y.z"                                     # remember to use double quotes to surround wildcard domain
#   options:
#     auth_token: c1234565789-abcdefghijklmnopqrst  # your zone API token
#
# 3. other providers, check docs/dns_providers.md for more

entrypoint:
  middlewares:
    # this part blocks all non-LAN HTTP traffic
    # remove if you don't want this
    - use: CIDRWhitelist
      allow:
        - "127.0.0.1"
        - "10.0.0.0/8"
        - "172.16.0.0/12"
        - "192.168.0.0/16"
      status: 403
      message: "Forbidden"
    # end of CIDRWhitelist

    # this part redirects HTTP to HTTPS
    # remove if you don't want this
    - use: RedirectHTTP

  # access_log:
  #   buffer_size: 1024
  #   path: /var/log/example.log
  #   filters:
  #     status_codes:
  #       values:
  #         - 200-299
  #         - 101
  #     method:
  #       values:
  #         - GET
  #     host:
  #       values:
  #         - example.y.z
  #     headers:
  #       negative: true
  #       values:
  #         - foo=bar
  #         - baz
  #     cidr:
  #       values:
  #         - 192.168.10.0/24
  #   fields:
  #     headers:
  #       default: keep
  #       config:
  #         foo: redact
  #     query:
  #       default: drop
  #       config:
  #         foo: keep
  #     cookies:
  #       default: redact
  #       config:
  #         foo: keep

providers:
  # include files are standalone yaml files under `config/` directory
  #
  # include:
  #   - file1.yml
  #   - file2.yml

  docker:
    # $DOCKER_HOST implies environment variable `DOCKER_HOST` or unix:///var/run/docker.sock by default
    local: $DOCKER_HOST
    # explicit only mode
    # only containers with explicit aliases will be proxied
    # add "!" after provider name to enable explicit only mode
    #
    # local!: $DOCKER_HOST
    #
    # add more docker providers if needed
    # for value format, see https://docs.docker.com/reference/cli/dockerd/
    #
    # remote-1: tcp://10.0.2.1:2375
    # remote-2: ssh://root:1234@10.0.2.2

  # notification providers (notify when service health changes)
  #
  # notification:
  #   - name: gotify
  #     provider: gotify
  #     url: https://gotify.domain.tld
  #     token: abcd
  #   - name: discord
  #     provider: webhook
  #     url: https://discord.com/api/webhooks/...
  #     template: discord
  #     # payload: | # discord template implies the following
  #     #   {
  #     #     "embeds": [
  #     #       {
  #     #         "title": $title,
  #     #         "fields": $fields,
  #     #         "color": "$color"
  #     #       }
  #     #     ]
  #     #   }
# if match_domains not defined
# any host = alias+[any domain] will match
# i.e. https://app1.y.z       will match alias app1 for any domain y.z
#  but https://app1.node1.y.z will only match alias "app.node1"
#
# if match_domains defined
# only host = alias+[one of match_domains] will match
# i.e. match_domains = [node1.my.app, my.site]
# https://app1.my.app, https://app1.my.net, etc. will not match even if app1 exists
# only https://*.node1.my.app and https://*.my.site will match
#
#
# match_domains:
#   - my.site
#   - node1.my.app

# homepage config
homepage:
  # use default app categories detected from alias or docker image name
  use_default_categories: true

# Below are fixed options (non hot-reloadable)

# timeout for shutdown (in seconds)
timeout_shutdown: 5