homelab/roles/traefik/templates/traefik.yml.j2

api:
  dashboard: true

providers:
  docker:
    exposedbydefault: false
  ansible.builtin.file:
    directory: /etc/traefik/dynamic

entrypoints:
  web:
    address: ':80'
{% if traefik_http_redirect is defined and traefik_http_redirect and not traefik_http_only %}
    http:
      redirections:
        entrypoint:
          to: websecure
          scheme: https
          permanent: true
{% endif %}
{% if not traefik_http_only is defined or not traefik_http_only %}
  websecure:
    address: ':443'
    http:
      tls: {}
{% endif %}

{% if traefik_acme_email is defined %}
certificatesResolvers:
  letsencrypt:
    acme:
      email: {{ traefik_acme_email }}
      storage: /etc/traefik/acme.json
      {% if not traefik_production -%}
      caServer: https://acme-staging-v02.api.letsencrypt.org/directory
      {% endif -%}
      httpChallenge:
        entryPoint: web
{% endif %}