  # log:
  #   level: INFO

  api:
    dashboard: true
    insecure: true

  providers:
    docker:
      endpoint: "unix:///var/run/docker.sock"
      watch: true
      exposedByDefault: false
    file:
      directory: /srv/traefik/dynamic
      watch: true

  entryPoints:
    web:
      address: ':80'
      forwardedHeaders:
        trustedIPs:
          - "127.0.0.1/32"
          - "172.16.0.0/12"
      http:
        redirections:
          entryPoint:
            to: 'websecure'
            scheme: 'https'
    websecure:
      address: ':443'
      forwardedHeaders:
        trustedIPs:
          - "127.0.0.1/32"
          - "172.16.0.0/12"

  certificatesResolvers:
    myresolver:
      acme:    
      # email: acme@thisprops.com
        storage: /shared/acme.json
        # httpChallenge:
        #   entryPoint: web
        #logging: true
        dnsChallenge:
          provider: cloudflare
          resolvers:
          - 1.1.1.1:53 # - --certificatesresolvers.cloudflare.acme.dnschallenge.resolvers[0]=1.1.1.1:53
          - 8.8.8.8:53 # - --certificatesresolvers.cloudflare.acme.dnschallenge.resolvers[1]=8.8.8.8:53