global:
  checkNewVersion: true
  sendAnonymousUsage: false
serversTransport:
  insecureSkipVerify: true
entryPoints:
  web:
    address: ":80"
    forwardedHeaders:
      trustedIPs: ["172.19.0.0/16"]
      insecure: false
    proxyProtocol:
      trustedIPs: ["172.19.0.0/16"]
      insecure: false
    http:
      redirections:
        entryPoint:
          to: websecure
          scheme: https
  websecure:
    address: ":443"
    forwardedHeaders:
      trustedIPs: ["172.19.0.0/16"]
      insecure: false
    proxyProtocol:
      trustedIPs: ["172.19.0.0/16"]
      insecure: false
    http:
      middlewares: ["secure-headers@file"]
      tls:
        certResolver: "hetzner"
providers:
  file:
    filename: "dynamic.yaml"
    watch: true
  docker:
    exposedByDefault: false
    network: "proxy"
    defaultRule: 'Host(`{{ index .Labels "com.docker.compose.service"}}.unjx.de`)'
api:
  dashboard: true
  insecure: true
metrics:
  prometheus: {}
certificatesResolvers:
  hetzner:
    acme:
      email: "mail@example.de"
      storage: "acme.json"
      dnsChallenge:
        provider: "hetzner"