support/docker/production/config/traefik.toml

   1 # Uncomment this line in order to enable debugging through logs
   2 # debug = true
   3 defaultEntryPoints = ["http", "https"]
   4
   5 [entryPoints]
   6   [entryPoints.http]
   7   address = ":80"
   8     [entryPoints.http.redirect]
   9     entryPoint = "https"
  10   [entryPoints.https]
  11   address = ":443"
  12     [entryPoints.https.tls]
  13     MinVersion = "VersionTLS12"
  14     CurvePreferences = [
  15       "CurveP521",
  16       "CurveP384",
  17       "CurveP256"
  18     ]
  19     PreferServerCipherSuites = true
  20     CipherSuites = [
  21       "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305",
  22       "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305",
  23       "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
  24       "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
  25       "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA",
  26       "TLS_RSA_WITH_AES_256_GCM_SHA384",
  27       "TLS_RSA_WITH_AES_256_CBC_SHA"
  28     ]
  29     FrameDeny = false # here we don't want to deny frames since we have an embed
  30     STSIncludeSubdomains = true
  31     STSSeconds = 315360000
  32     STSPreload = true
  33     ContentTypeNosniff = true
  34     BrowserXssFilter = true
  35
  36
  37 # Enable ACME (Let's Encrypt): automatic SSL.
  38 [acme]
  39
  40 # Email address used for registration.
  41 #
  42 # Required
  43 #
  44 email = "<MY EMAIL ADDRESS>"
  45
  46 # File or key used for certificates storage.
  47 #
  48 # Required
  49 #
  50 storage = "/etc/acme.json"
  51 # or `storage = "traefik/acme/account"` if using KV store.
  52
  53 # Entrypoint to proxy acme apply certificates to.
  54 # WARNING, if the TLS-SNI-01 challenge is used, it must point to an entrypoint on port 443
  55 #
  56 # Required
  57 #
  58 entryPoint = "https"
  59
  60 # Domains list.
  61 #
  62 [[acme.domains]]
  63   main = "<MY DOMAIN>"
  64
  65 # Use a HTTP-01 acme challenge rather than TLS-SNI-01 challenge
  66 #
  67 # Optional but recommend
  68 #
  69 [acme.httpChallenge]
  70
  71   # EntryPoint to use for the challenges.
  72   #
  73   # Required
  74   #
  75   entryPoint = "http"