# Traefik static configuration for Dezky local development
#
# Provides TLS termination using mkcert-generated wildcard certificate.
# Auto-discovers services via Docker labels.

global:
  checkNewVersion: false
  sendAnonymousUsage: false

api:
  dashboard: true
  insecure: true  # OK for local dev only — exposes dashboard on :8080

log:
  level: INFO

accessLog: {}

entryPoints:
  web:
    address: ":80"
    http:
      redirections:
        entryPoint:
          to: websecure
          scheme: https
          permanent: true

  websecure:
    address: ":443"
    http:
      tls: {}

providers:
  docker:
    endpoint: "unix:///var/run/docker.sock"
    exposedByDefault: false
    network: dezky
    watch: true

  file:
    filename: /etc/traefik/dynamic.yml
    watch: true