# external service
# https://doc.traefik.io/traefik/providers/file/

http:
  #
  # http routers
  # ------------
  routers:
    home-assistant-rtr:
      entryPoints:
        - "web"
      rule: "Host(`home-assistant.sthome.org`)&& PathPrefix(`/`)"
      tls:
        certresolver: "solver-dns"
      middlewares:
#        - home-assistant-auth
        - http-mw-secureHeaders-redirect
      service: "ext-home-assistant-svc"

    home-assistant-secure-rtr:
      entryPoints:
        - "websecure"
      rule: "Host(`home-assistant.sthome.org`)&& PathPrefix(`/`)"
      tls:
        certresolver: "solver-dns"
      middlewares:
#        - home-assistant-auth
        - http-mw-secureHeaders
      service: "ext-home-assistant-svc"
  #
  # http middlewares
  # ----------------
#  middlewares:
#    home-assistant-auth:
#      basicauth:
#        usersfile: "/mnt/users/home-assistant.txt"

#    home-assistant-https-redirect:
#      redirectscheme:
#        scheme: https
#        permanent: true
  #
  # http service
  # ------------
  # https://doc.traefik.io/traefik/routing/services/
  services:
    ext-home-assistant-svc:
      loadBalancer:
        servers:
          - url: "https://home-assistant-px.sthome.org" # requires url to be added to /etc/hosts; must also be https, other browser will emit "too many redirects error"
          #- url: "http://10.0.0.51:8123" # safest to use ip address, with reservation in dhcp server
        passHostHeader: true