homelab/roles/traefik/templates/external.yml.j2

http:
  routers:
    {{ item.name }}:
      rule: "Host(`{{ item.domain }}`)"
      service: {{ item.name }}-service
{% if item.basicauth is defined and item.middlewares is defined %}
      middlewares: "{{ item.middlewares }},{{ item.name }}-auth@file"
{% elif item.basicauth is defined %}
      middlewares: "{{ item.name }}-auth@file"
{% elif item.middlewares is defined %}
      middlewares: "{{ item.middlewares }}"
{% endif %}
{% if traefik_acme_email is defined %}
      tls:
        certResolver: letsencrypt
        domains:
          - main: "{{ item.domain }}"
{% endif %}
      entryPoints:
        - "websecure"
  services:
    {{ item.name }}-service:
      loadBalancer:
{% if item.httpsbackend is defined %}
        serversTransport: {{ item.name }}-httpsbackend
        servers:
          - url: "{{ item.backend }}"
{% endif %}
{% if item.httpsbackend is defined %}
  serversTransports:
      {{ item.name }}-httpsbackend:
        insecureSkipVerify: true
{% endif %}
{% if item.basicauth is defined %}
  middlewares:
    {{ item.name }}-auth:
      basicAuth:
        users:
{% for user in item.basicauth %}
          - "{{ user }}"
{% endfor %}
{% endif %}