api:
  dashboard: true
  insecure: true

entryPoints:
  http:
    address: ":80"
    http:
      redirections:
        entryPoint:
          to: https
          scheme: https
  https:
    address: ":443"
    http:
      tls:
        certResolver: default
      middlewares:
        - hsts@file

providers:
  docker:
    network: "traefik_proxy"
    exposedByDefault: false
  file:
    filename: "/traefik.yml"

certificatesResolvers:
  default:
    acme:
      email: "fanyx@fanyx.xyz"
      storage: "acme.json"
      caServer: "https://acme-v02.api.letsencrypt.org/directory"
      tlsChallenge: true
      httpChallenge:
        entrypoint: http

http:
  routers:
    jellyfin:
     entrypoints: 
       - "https"
     rule: "Host(`v.fanyx.xyz`)"
     service: "jellyfin"
    radicale:
      entrypoints:
        - "https"
      rule: "Host(`r.fanyx.xyz`)"
      service: "radicale"
  services:
    jellyfin:
      loadBalancer:
        servers:
         - url: "http://172.18.0.1:8096"
    radicale:
      loadBalancer:
        servers:
          - url: "http://172.18.0.1:5232"
  middlewares:
    hsts:
      headers:
        frameDeny: true
        browserXssFilter: true