traefik.yml

api:
  dashboard: true

entryPoints:
  http:
    address: ":80"
    # http:
    #   redirections:
    #     entrypoint:
    #       to: https
    #       scheme: https
  https:
    address: ":443"

http:
  routers:
    http-catchall:
      rule: hostregexp(`{host:.+}`)
      entrypoints:
      - http
      middlewares:
      - redirect-to-https
  middlewares:
    redirect-to-https:
      redirectScheme:
        scheme: https
        permanent: false

providers:
  docker: true
    # endpoint: "unix:///var/run/docker.sock"
    # ## Do not expose all Docker services, only the ones explicitly exposed
    # exposedByDefault: false
    # # constraints: "Label(`traefik.constraint-label`, `traefik`)"

certificatesResolvers:
  letsEncrypt:
    acme:
      email: postmaster@domain.com
      storage: acme.json
      caServer: "https://acme-staging-v02.api.letsencrypt.org/directory"
      # dnsChallenge:
      #   provider: acme-dns # replace this with your dns provider https://doc.traefik.io/traefik/https/acme/
      httpChallenge:
        entryPoint: http

tls:
  options:
    default:
      sniStrict: true

# dnsChallenge:
#   provider: cloudflare

log:
  level: DEBUG
  # filePath: "/var/log/traefik.log"

# accesslog:
  # filePath: "/var/log/traefik_accesslog.log"