[global]
  checkNewVersion = false
  sendAnonymousUsage = false

[log]
  level = "DEBUG"

[entryPoints]
  [entryPoints.tcp]
    address = ":8093"

[api]
  insecure = true

[providers.file]
  filename = "{{ .SelfFilename }}"

## dynamic configuration ##

[tcp]
  [tcp.routers]
    [tcp.routers.to-whoami-a]
      entryPoints = ["tcp"]
      rule = "HostSNI(`whoami-a.test`)"
      service = "whoami-a"
      middlewares = ["blocking-ipwhitelist"]
      [tcp.routers.to-whoami-a.tls]
        passthrough = true

    [tcp.routers.to-whoami-b]
      entryPoints = ["tcp"]
      rule = "HostSNI(`whoami-b.test`)"
      service = "whoami-b"
      middlewares = ["allowing-ipwhitelist"]
      [tcp.routers.to-whoami-b.tls]
        passthrough = true

  [tcp.services]
    [tcp.services.whoami-a.loadBalancer]
      [[tcp.services.whoami-a.loadBalancer.servers]]
        address = "localhost:8081"

    [tcp.services.whoami-b.loadBalancer]
      [[tcp.services.whoami-b.loadBalancer.servers]]
        address = "localhost:8082"

  [tcp.middlewares]
    [tcp.middlewares.allowing-ipwhitelist.ipWhiteList]
      sourceRange = ["127.0.0.1/32"]
    [tcp.middlewares.blocking-ipwhitelist.ipWhiteList]
      sourceRange = ["127.127.127.127/32"]

[[tls.certificates]]
  certFile = "fixtures/tcp/whoami-c.crt"
  keyFile = "fixtures/tcp/whoami-c.key"