api:
  dashboard: {{ traefik_dashboard_enabled | bool | ternary('true', 'false') }}
entryPoints:
  web:
    address: ":{{ traefik_http_port }}"
{% if traefik_forwarded_headers_trusted_ips | length > 0 %}
    forwardedHeaders:
      trustedIPs:
{% for cidr in traefik_forwarded_headers_trusted_ips %}
        - "{{ cidr }}"
{% endfor %}
{% endif %}
  websecure:
    address: ":{{ traefik_https_port }}"
{% if traefik_forwarded_headers_trusted_ips | length > 0 %}
    forwardedHeaders:
      trustedIPs:
{% for cidr in traefik_forwarded_headers_trusted_ips %}
        - "{{ cidr }}"
{% endfor %}
{% endif %}
providers:
{% if traefik_docker_provider_enabled | bool %}
  docker:
    exposedByDefault: false
{% endif %}
{% if traefik_file_provider_enabled | bool %}
  file:
    directory: /etc/traefik/dynamic
    watch: true
{% endif %}
certificatesResolvers:
  letsencrypt:
    acme:
      email: "{{ traefik_acme_email }}"
      storage: /data/acme.json
      httpChallenge:
        entryPoint: web