http:
  routers:
    dashboard:
      rule: "Host(`traefik.armin.internal.simponic.xyz`)"
      service: "noop@internal"
      entryPoints:
        - "http"
      middlewares:
        - "secured-redirect"
    dashboard-secured:
      entryPoints:
        - "https"
      rule: "Host(`traefik.armin.internal.simponic.xyz`)"
      service: "api@internal"
      tls:
        certResolver: "local"
        domains:
          - main: "traefik.armin.internal.simponic.xyz"

    karan:
      rule: "Host(`dev.armin.internal.simponic.xyz`)"
      service: "noop@internal"
      entryPoints:
        - "http"
      middlewares:
        - "secured-redirect"
    karan-secured:
      entryPoints:
        - "https"
      rule: "Host(`dev.armin.internal.simponic.xyz`)"
      service: "example-service"
      tls:
        certResolver: "local"
        options: acmeClient
        domains:
          - main: "dev.armin.internal.simponic.xyz"

  middlewares:
    secured-redirect:
      redirectscheme:
        scheme: https
        permanent: true

  services:
    example-service:
      loadBalancer:
        passHostHeader: true
        servers:
          - url: "http://localhost:8080/"

tls:
  options:
    acmeClient:
      clientAuth:
        caFiles:
          - /Users/lizzy/armin/roots.pem
        clientAuthType: RequireAndVerifyClientCert

log:
  filePath: log-file.log # relative to current location, will be created
  level: DEBUG