# external service
# https://doc.traefik.io/traefik/providers/file/

http:
#
# http routers
# ------------
  routers:
    frigate-rtr:
      entryPoints:
        - "web"
      rule: "Host(`frigate.sthome.org`)&& PathPrefix(`/`)"
      middlewares:
        - frigate-auth
        - http-mw-rateLimit-secureHeaders-redirect@file
      service: "ext-frigate-svc"

    frigate-secure-rtr:
      entryPoints:
        - "websecure"
      rule: "Host(`frigate.sthome.org`)&& PathPrefix(`/`)"
      tls:
        certresolver: "solver-dns"
        options: tls-options@file
      middlewares:
        - frigate-auth
        - http-mw-rateLimit-secureHeaders@file
      service: "ext-frigate-svc"
      
    frigate-secure-status-rtr:
      entryPoints:
        - "websecure"
      rule: "Host(`frigate.sthome.org`)&& PathPrefix(`/stats`)"
      tls:
        certresolver: "solver-dns"
        options: tls-options@file
      service: "ext-frigate-svc"  
#
# http middlewares
# ----------------
  middlewares:
    frigate-auth:
      basicauth:
        usersfile: "/mnt/users/frigate.txt"
#    frigate-https-redirect:
#      redirectscheme:
#        scheme: https
#        permanent: true

#
# http service
# ------------
# https://doc.traefik.io/traefik/routing/services/
  services:
    ext-frigate-svc:
      loadBalancer:
        servers:
          - url: "http://10.0.0.51:5000" # safest to use ip address, with reservation in dhcp server
        passHostHeader: true