global:
  checkNewVersion: false
  sendAnonymousUsage: false

log:
  level: INFO

accessLog:
  filePath: "" # Vacio para volcar a stdout/journald
  format: json
  filters:
    statusCodes:
      - "400-499" # Captura errores de autenticación y accesos no autorizados
api:
  dashboard: false
  insecure: false

entryPoints:
  websecure:
    address: ":8443"
    proxyProtocol:
      trustedIPs:
        - "127.0.0.1/32"
        - "10.89.0.0/16"

providers:
  docker:
    endpoint: "unix:///run/user/1002/podman/podman.sock"
    exposedByDefault: false
  file:
    filename: "/etc/traefik/config.yml"
    watch: true

certificatesResolvers:
  cloudflare:
    acme:
      email: "tu-email@servidor.es"
      storage: "/etc/traefik/acme.json"
      dnsChallenge:
        provider: cloudflare
        propagation:
          delayBeforeChecks: 10s
        resolvers:
          - "1.1.1.1:53"
          - "8.8.8.8:53"