# traefik.yml - static configuration (file provider)
checkNewVersion: true
sendAnonymousUsage: false

log:
  level: INFO

api:
  dashboard: true
  insecure: false   # set to true only for quick local testing (not recommended for public)

# single entryPoints section (merged)
entryPoints:
  web:
    address: ":80"
    http:
      redirections:
        entryPoint:
          to: websecure
          scheme: https
    # optional timeouts can live under transport as well (kept only on websecure below)

  websecure:
    address: ":443"
    http:
      tls:
        certResolver: leresolver
    transport:
      respondingTimeouts:
        # keep these large if you expect long uploads/downloads or long-lived requests
        readTimeout: 600s
        writeTimeout: 600s
        idleTimeout: 600s

providers:
  swarm:
    endpoint: "unix:///var/run/docker.sock"

certificatesResolvers:
  leresolver:
    acme:
      email: "sterlenjohnson6@gmail.com"
      storage: "/letsencrypt/acme.json"
      # DNS-01, using DuckDNS provider
      dnsChallenge:
        provider: duckdns
        delayBeforeCheck: 60s
        # Usually unnecessary to specify "resolvers" unless you have special internal resolvers.
        # If you DO need Traefik to use specific DNS servers for the challenge, make sure
        # the container has network access to them and that they will answer public DNS queries.
        resolvers:
         - "192.168.1.196:53"
         - "192.168.1.245:53"
         - "192.168.1.62:53"