# Traefik Global Configuration
# Documentation: https://doc.traefik.io/traefik/

entryPoints:
  web:
    address: ":80"
    http:
      redirections:
        entryPoint:
          to: websecure
          scheme: https
          permanent: false

  websecure:
    address: ":443"

providers:
  docker:
    endpoint: "unix:///var/run/docker.sock"
    exposedByDefault: false  # Require explicit enable via labels
    network: bttoxin-network

  file:
    directory: /etc/traefik/dynamic
    watch: true

api:
  dashboard: true
  insecure: true  # Only for development! Disable in production

# SSL Configuration (uncomment for production)
# certificatesResolvers:
#   letsencrypt:
#     acme:
#       email: your-email@example.com
#       storage: /acme.json
#       httpChallenge:
#         entryPoint: web

# Logging
log:
  level: INFO
  filePath: /var/log/traefik/traefik.log

accessLog:
  filePath: /var/log/traefik/access.log