# external service
# https://doc.traefik.io/traefik/providers/file/

http:
#
# http routers
# ------------
  routers:
    cctv-rtr:
      entryPoints:
        - "web"
      rule: "Host(`cctv.sthome.org`)&& PathPrefix(`/`)"
      middlewares:

        - http-mw-rateLimit-secureHeaders-redirect@file
      service: "ext-cctv-svc"

    cctv-secure-rtr:
      entryPoints:
        - "websecure"
      rule: "Host(`cctv.sthome.org`)&& PathPrefix(`/`)"
      tls:
        certresolver: "solver-dns"
        options: tls-options@file
      middlewares:

        - http-mw-rateLimit-secureHeaders@file
      service: "ext-cctv-svc"
  #
# http service
# ------------
# https://doc.traefik.io/traefik/routing/services/
  services:
    ext-cctv-svc:
      loadBalancer:
        servers:
          - url: "http://10.0.0.10:80" # safest to use ip address, with reservation in dhcp server
        passHostHeader: true