# Managed by Ansible — do not edit manually
global:
  checkNewVersion: false
  sendAnonymousUsage: false

api:
  dashboard: true

log:
  level: INFO

accessLog:
  filePath: /var/log/traefik/access.log
  bufferingSize: 100

entryPoints:
  web:
    address: ":80"
    http:
      redirections:
        entryPoint:
          to: websecure
          scheme: https
          permanent: true
  websecure:
    address: ":443"
    transport:
      respondingTimeouts:
        readTimeout: 0    # no limit — required for large registry layer uploads
  imaps:
    address: ":993"

serversTransport:
  insecureSkipVerify: true   # allows Traefik to proxy clay's self-signed d.clay.studio cert on port 2633

providers:
  docker:
    exposedByDefault: false
    network: "{{ traefik_network }}"

certificatesResolvers:
  letsencrypt:
    acme:
      email: "{{ acme_email }}"
      storage: /acme.json
      httpChallenge:
        entryPoint: web