`TRAEFIK_ACCESSLOG`: Access log settings. (Default: ```false```) `TRAEFIK_ACCESSLOG_BUFFERINGSIZE`: Number of access log lines to process in a buffered way. (Default: ```0```) `TRAEFIK_ACCESSLOG_FIELDS_DEFAULTMODE`: Default mode for fields: keep | drop (Default: ```keep```) `TRAEFIK_ACCESSLOG_FIELDS_HEADERS_DEFAULTMODE`: Default mode for fields: keep | drop | redact (Default: ```drop```) `TRAEFIK_ACCESSLOG_FIELDS_HEADERS_NAMES_`: Override mode for headers `TRAEFIK_ACCESSLOG_FIELDS_NAMES_`: Override mode for fields `TRAEFIK_ACCESSLOG_FILEPATH`: Access log file path. Stdout is used when omitted or empty. `TRAEFIK_ACCESSLOG_FILTERS_MINDURATION`: Keep access logs when request took longer than the specified duration. (Default: ```0```) `TRAEFIK_ACCESSLOG_FILTERS_RETRYATTEMPTS`: Keep access logs when at least one retry happened. (Default: ```false```) `TRAEFIK_ACCESSLOG_FILTERS_STATUSCODES`: Keep access logs with status codes in the specified range. `TRAEFIK_ACCESSLOG_FORMAT`: Access log format: json | common (Default: ```common```) `TRAEFIK_API`: Enable api/dashboard. (Default: ```false```) `TRAEFIK_API_DASHBOARD`: Activate dashboard. (Default: ```true```) `TRAEFIK_API_DEBUG`: Enable additional endpoints for debugging and profiling. (Default: ```false```) `TRAEFIK_API_INSECURE`: Activate API directly on the entryPoint named traefik. (Default: ```false```) `TRAEFIK_CERTIFICATESRESOLVERS_`: Certificates resolvers configuration. (Default: ```false```) `TRAEFIK_CERTIFICATESRESOLVERS__ACME_CASERVER`: CA server to use. (Default: ```https://acme-v02.api.letsencrypt.org/directory```) `TRAEFIK_CERTIFICATESRESOLVERS__ACME_DNSCHALLENGE`: Activate DNS-01 Challenge. (Default: ```false```) `TRAEFIK_CERTIFICATESRESOLVERS__ACME_DNSCHALLENGE_DELAYBEFORECHECK`: Assume DNS propagates after a delay in seconds rather than finding and querying nameservers. (Default: ```0```) `TRAEFIK_CERTIFICATESRESOLVERS__ACME_DNSCHALLENGE_DISABLEPROPAGATIONCHECK`: Disable the DNS propagation checks before notifying ACME that the DNS challenge is ready. [not recommended] (Default: ```false```) `TRAEFIK_CERTIFICATESRESOLVERS__ACME_DNSCHALLENGE_PROVIDER`: Use a DNS-01 based challenge provider rather than HTTPS. `TRAEFIK_CERTIFICATESRESOLVERS__ACME_DNSCHALLENGE_RESOLVERS`: Use following DNS servers to resolve the FQDN authority. `TRAEFIK_CERTIFICATESRESOLVERS__ACME_EAB_HMACENCODED`: Base64 encoded HMAC key from External CA. `TRAEFIK_CERTIFICATESRESOLVERS__ACME_EAB_KID`: Key identifier from External CA. `TRAEFIK_CERTIFICATESRESOLVERS__ACME_EMAIL`: Email address used for registration. `TRAEFIK_CERTIFICATESRESOLVERS__ACME_HTTPCHALLENGE`: Activate HTTP-01 Challenge. (Default: ```false```) `TRAEFIK_CERTIFICATESRESOLVERS__ACME_HTTPCHALLENGE_ENTRYPOINT`: HTTP challenge EntryPoint `TRAEFIK_CERTIFICATESRESOLVERS__ACME_KEYTYPE`: KeyType used for generating certificate private key. Allow value 'EC256', 'EC384', 'RSA2048', 'RSA4096', 'RSA8192'. (Default: ```RSA4096```) `TRAEFIK_CERTIFICATESRESOLVERS__ACME_PREFERREDCHAIN`: Preferred chain to use. `TRAEFIK_CERTIFICATESRESOLVERS__ACME_STORAGE`: Storage to use. (Default: ```acme.json```) `TRAEFIK_CERTIFICATESRESOLVERS__ACME_TLSCHALLENGE`: Activate TLS-ALPN-01 Challenge. (Default: ```true```) `TRAEFIK_ENTRYPOINTS_`: Entry points definition. (Default: ```false```) `TRAEFIK_ENTRYPOINTS__ADDRESS`: Entry point address. `TRAEFIK_ENTRYPOINTS__ENABLEHTTP3`: Enable HTTP3. (Default: ```false```) `TRAEFIK_ENTRYPOINTS__FORWARDEDHEADERS_INSECURE`: Trust all forwarded headers. (Default: ```false```) `TRAEFIK_ENTRYPOINTS__FORWARDEDHEADERS_TRUSTEDIPS`: Trust only forwarded headers from selected IPs. `TRAEFIK_ENTRYPOINTS__HTTP`: HTTP configuration. `TRAEFIK_ENTRYPOINTS__HTTP_MIDDLEWARES`: Default middlewares for the routers linked to the entry point. `TRAEFIK_ENTRYPOINTS__HTTP_REDIRECTIONS_ENTRYPOINT_PERMANENT`: Applies a permanent redirection. (Default: ```true```) `TRAEFIK_ENTRYPOINTS__HTTP_REDIRECTIONS_ENTRYPOINT_PRIORITY`: Priority of the generated router. (Default: ```2147483647```) `TRAEFIK_ENTRYPOINTS__HTTP_REDIRECTIONS_ENTRYPOINT_SCHEME`: Scheme used for the redirection. (Default: ```https```) `TRAEFIK_ENTRYPOINTS__HTTP_REDIRECTIONS_ENTRYPOINT_TO`: Targeted entry point of the redirection. `TRAEFIK_ENTRYPOINTS__HTTP_TLS`: Default TLS configuration for the routers linked to the entry point. (Default: ```false```) `TRAEFIK_ENTRYPOINTS__HTTP_TLS_CERTRESOLVER`: Default certificate resolver for the routers linked to the entry point. `TRAEFIK_ENTRYPOINTS__HTTP_TLS_DOMAINS`: Default TLS domains for the routers linked to the entry point. `TRAEFIK_ENTRYPOINTS__HTTP_TLS_DOMAINS[n]_MAIN`: Default subject name. `TRAEFIK_ENTRYPOINTS__HTTP_TLS_DOMAINS[n]_SANS`: Subject alternative names. `TRAEFIK_ENTRYPOINTS__HTTP_TLS_OPTIONS`: Default TLS options for the routers linked to the entry point. `TRAEFIK_ENTRYPOINTS__PROXYPROTOCOL`: Proxy-Protocol configuration. (Default: ```false```) `TRAEFIK_ENTRYPOINTS__PROXYPROTOCOL_INSECURE`: Trust all. (Default: ```false```) `TRAEFIK_ENTRYPOINTS__PROXYPROTOCOL_TRUSTEDIPS`: Trust only selected IPs. `TRAEFIK_ENTRYPOINTS__TRANSPORT_LIFECYCLE_GRACETIMEOUT`: Duration to give active requests a chance to finish before Traefik stops. (Default: ```10```) `TRAEFIK_ENTRYPOINTS__TRANSPORT_LIFECYCLE_REQUESTACCEPTGRACETIMEOUT`: Duration to keep accepting requests before Traefik initiates the graceful shutdown procedure. (Default: ```0```) `TRAEFIK_ENTRYPOINTS__TRANSPORT_RESPONDINGTIMEOUTS_IDLETIMEOUT`: IdleTimeout is the maximum amount duration an idle (keep-alive) connection will remain idle before closing itself. If zero, no timeout is set. (Default: ```180```) `TRAEFIK_ENTRYPOINTS__TRANSPORT_RESPONDINGTIMEOUTS_READTIMEOUT`: ReadTimeout is the maximum duration for reading the entire request, including the body. If zero, no timeout is set. (Default: ```0```) `TRAEFIK_ENTRYPOINTS__TRANSPORT_RESPONDINGTIMEOUTS_WRITETIMEOUT`: WriteTimeout is the maximum duration before timing out writes of the response. If zero, no timeout is set. (Default: ```0```) `TRAEFIK_EXPERIMENTAL_DEVPLUGIN_GOPATH`: plugin's GOPATH. `TRAEFIK_EXPERIMENTAL_DEVPLUGIN_MODULENAME`: plugin's module name. `TRAEFIK_EXPERIMENTAL_HTTP3`: Enable HTTP3. (Default: ```false```) `TRAEFIK_EXPERIMENTAL_KUBERNETESGATEWAY`: Allow the Kubernetes gateway api provider usage. (Default: ```false```) `TRAEFIK_EXPERIMENTAL_PLUGINS__MODULENAME`: plugin's module name. `TRAEFIK_EXPERIMENTAL_PLUGINS__VERSION`: plugin's version. `TRAEFIK_GLOBAL_CHECKNEWVERSION`: Periodically check if a new version has been released. (Default: ```false```) `TRAEFIK_GLOBAL_SENDANONYMOUSUSAGE`: Periodically send anonymous usage statistics. If the option is not specified, it will be enabled by default. (Default: ```false```) `TRAEFIK_HOSTRESOLVER`: Enable CNAME Flattening. (Default: ```false```) `TRAEFIK_HOSTRESOLVER_CNAMEFLATTENING`: A flag to enable/disable CNAME flattening (Default: ```false```) `TRAEFIK_HOSTRESOLVER_RESOLVCONFIG`: resolv.conf used for DNS resolving (Default: ```/etc/resolv.conf```) `TRAEFIK_HOSTRESOLVER_RESOLVDEPTH`: The maximal depth of DNS recursive resolving (Default: ```5```) `TRAEFIK_LOG`: Traefik log settings. (Default: ```false```) `TRAEFIK_LOG_FILEPATH`: Traefik log file path. Stdout is used when omitted or empty. `TRAEFIK_LOG_FORMAT`: Traefik log format: json | common (Default: ```common```) `TRAEFIK_LOG_LEVEL`: Log level set to traefik logs. (Default: ```ERROR```) `TRAEFIK_METRICS_DATADOG`: Datadog metrics exporter type. (Default: ```false```) `TRAEFIK_METRICS_DATADOG_ADDENTRYPOINTSLABELS`: Enable metrics on entry points. (Default: ```true```) `TRAEFIK_METRICS_DATADOG_ADDRESS`: Datadog's address. (Default: ```localhost:8125```) `TRAEFIK_METRICS_DATADOG_ADDSERVICESLABELS`: Enable metrics on services. (Default: ```true```) `TRAEFIK_METRICS_DATADOG_PUSHINTERVAL`: Datadog push interval. (Default: ```10```) `TRAEFIK_METRICS_INFLUXDB`: InfluxDB metrics exporter type. (Default: ```false```) `TRAEFIK_METRICS_INFLUXDB_ADDENTRYPOINTSLABELS`: Enable metrics on entry points. (Default: ```true```) `TRAEFIK_METRICS_INFLUXDB_ADDRESS`: InfluxDB address. (Default: ```localhost:8089```) `TRAEFIK_METRICS_INFLUXDB_ADDSERVICESLABELS`: Enable metrics on services. (Default: ```true```) `TRAEFIK_METRICS_INFLUXDB_DATABASE`: InfluxDB database used when protocol is http. `TRAEFIK_METRICS_INFLUXDB_PASSWORD`: InfluxDB password (only with http). `TRAEFIK_METRICS_INFLUXDB_PROTOCOL`: InfluxDB address protocol (udp or http). (Default: ```udp```) `TRAEFIK_METRICS_INFLUXDB_PUSHINTERVAL`: InfluxDB push interval. (Default: ```10```) `TRAEFIK_METRICS_INFLUXDB_RETENTIONPOLICY`: InfluxDB retention policy used when protocol is http. `TRAEFIK_METRICS_INFLUXDB_USERNAME`: InfluxDB username (only with http). `TRAEFIK_METRICS_PROMETHEUS`: Prometheus metrics exporter type. (Default: ```false```) `TRAEFIK_METRICS_PROMETHEUS_ADDENTRYPOINTSLABELS`: Enable metrics on entry points. (Default: ```true```) `TRAEFIK_METRICS_PROMETHEUS_ADDSERVICESLABELS`: Enable metrics on services. (Default: ```true```) `TRAEFIK_METRICS_PROMETHEUS_BUCKETS`: Buckets for latency metrics. (Default: ```0.100000, 0.300000, 1.200000, 5.000000```) `TRAEFIK_METRICS_PROMETHEUS_ENTRYPOINT`: EntryPoint (Default: ```traefik```) `TRAEFIK_METRICS_PROMETHEUS_MANUALROUTING`: Manual routing (Default: ```false```) `TRAEFIK_METRICS_STATSD`: StatsD metrics exporter type. (Default: ```false```) `TRAEFIK_METRICS_STATSD_ADDENTRYPOINTSLABELS`: Enable metrics on entry points. (Default: ```true```) `TRAEFIK_METRICS_STATSD_ADDRESS`: StatsD address. (Default: ```localhost:8125```) `TRAEFIK_METRICS_STATSD_ADDSERVICESLABELS`: Enable metrics on services. (Default: ```true```) `TRAEFIK_METRICS_STATSD_PREFIX`: Prefix to use for metrics collection. (Default: ```traefik```) `TRAEFIK_METRICS_STATSD_PUSHINTERVAL`: StatsD push interval. (Default: ```10```) `TRAEFIK_PILOT_TOKEN`: Traefik Pilot token. `TRAEFIK_PING`: Enable ping. (Default: ```false```) `TRAEFIK_PING_ENTRYPOINT`: EntryPoint (Default: ```traefik```) `TRAEFIK_PING_MANUALROUTING`: Manual routing (Default: ```false```) `TRAEFIK_PING_TERMINATINGSTATUSCODE`: Terminating status code (Default: ```503```) `TRAEFIK_PROVIDERS_CONSUL`: Enable Consul backend with default settings. (Default: ```false```) `TRAEFIK_PROVIDERS_CONSULCATALOG`: Enable ConsulCatalog backend with default settings. (Default: ```false```) `TRAEFIK_PROVIDERS_CONSULCATALOG_CACHE`: Use local agent caching for catalog reads. (Default: ```false```) `TRAEFIK_PROVIDERS_CONSULCATALOG_CONSTRAINTS`: Constraints is an expression that Traefik matches against the container's labels to determine whether to create any route for that container. `TRAEFIK_PROVIDERS_CONSULCATALOG_DEFAULTRULE`: Default rule. (Default: ```Host(`{{ normalize .Name }}`)```) `TRAEFIK_PROVIDERS_CONSULCATALOG_ENDPOINT_ADDRESS`: The address of the Consul server (Default: ```127.0.0.1:8500```) `TRAEFIK_PROVIDERS_CONSULCATALOG_ENDPOINT_DATACENTER`: Data center to use. If not provided, the default agent data center is used `TRAEFIK_PROVIDERS_CONSULCATALOG_ENDPOINT_ENDPOINTWAITTIME`: WaitTime limits how long a Watch will block. If not provided, the agent default values will be used (Default: ```0```) `TRAEFIK_PROVIDERS_CONSULCATALOG_ENDPOINT_HTTPAUTH_PASSWORD`: Basic Auth password `TRAEFIK_PROVIDERS_CONSULCATALOG_ENDPOINT_HTTPAUTH_USERNAME`: Basic Auth username `TRAEFIK_PROVIDERS_CONSULCATALOG_ENDPOINT_SCHEME`: The URI scheme for the Consul server `TRAEFIK_PROVIDERS_CONSULCATALOG_ENDPOINT_TLS_CA`: TLS CA `TRAEFIK_PROVIDERS_CONSULCATALOG_ENDPOINT_TLS_CAOPTIONAL`: TLS CA.Optional (Default: ```false```) `TRAEFIK_PROVIDERS_CONSULCATALOG_ENDPOINT_TLS_CERT`: TLS cert `TRAEFIK_PROVIDERS_CONSULCATALOG_ENDPOINT_TLS_INSECURESKIPVERIFY`: TLS insecure skip verify (Default: ```false```) `TRAEFIK_PROVIDERS_CONSULCATALOG_ENDPOINT_TLS_KEY`: TLS key `TRAEFIK_PROVIDERS_CONSULCATALOG_ENDPOINT_TOKEN`: Token is used to provide a per-request ACL token which overrides the agent's default token `TRAEFIK_PROVIDERS_CONSULCATALOG_EXPOSEDBYDEFAULT`: Expose containers by default. (Default: ```true```) `TRAEFIK_PROVIDERS_CONSULCATALOG_PREFIX`: Prefix for consul service tags. Default 'traefik' (Default: ```traefik```) `TRAEFIK_PROVIDERS_CONSULCATALOG_REFRESHINTERVAL`: Interval for check Consul API. Default 100ms (Default: ```15```) `TRAEFIK_PROVIDERS_CONSULCATALOG_REQUIRECONSISTENT`: Forces the read to be fully consistent. (Default: ```false```) `TRAEFIK_PROVIDERS_CONSULCATALOG_STALE`: Use stale consistency for catalog reads. (Default: ```false```) `TRAEFIK_PROVIDERS_CONSUL_ENDPOINTS`: KV store endpoints (Default: ```127.0.0.1:8500```) `TRAEFIK_PROVIDERS_CONSUL_PASSWORD`: KV Password `TRAEFIK_PROVIDERS_CONSUL_ROOTKEY`: Root key used for KV store (Default: ```traefik```) `TRAEFIK_PROVIDERS_CONSUL_TLS_CA`: TLS CA `TRAEFIK_PROVIDERS_CONSUL_TLS_CAOPTIONAL`: TLS CA.Optional (Default: ```false```) `TRAEFIK_PROVIDERS_CONSUL_TLS_CERT`: TLS cert `TRAEFIK_PROVIDERS_CONSUL_TLS_INSECURESKIPVERIFY`: TLS insecure skip verify (Default: ```false```) `TRAEFIK_PROVIDERS_CONSUL_TLS_KEY`: TLS key `TRAEFIK_PROVIDERS_CONSUL_USERNAME`: KV Username `TRAEFIK_PROVIDERS_DOCKER`: Enable Docker backend with default settings. (Default: ```false```) `TRAEFIK_PROVIDERS_DOCKER_CONSTRAINTS`: Constraints is an expression that Traefik matches against the container's labels to determine whether to create any route for that container. `TRAEFIK_PROVIDERS_DOCKER_DEFAULTRULE`: Default rule. (Default: ```Host(`{{ normalize .Name }}`)```) `TRAEFIK_PROVIDERS_DOCKER_ENDPOINT`: Docker server endpoint. Can be a tcp or a unix socket endpoint. (Default: ```unix:///var/run/docker.sock```) `TRAEFIK_PROVIDERS_DOCKER_EXPOSEDBYDEFAULT`: Expose containers by default. (Default: ```true```) `TRAEFIK_PROVIDERS_DOCKER_HTTPCLIENTTIMEOUT`: Client timeout for HTTP connections. (Default: ```0```) `TRAEFIK_PROVIDERS_DOCKER_NETWORK`: Default Docker network used. `TRAEFIK_PROVIDERS_DOCKER_SWARMMODE`: Use Docker on Swarm Mode. (Default: ```false```) `TRAEFIK_PROVIDERS_DOCKER_SWARMMODEREFRESHSECONDS`: Polling interval for swarm mode. (Default: ```15```) `TRAEFIK_PROVIDERS_DOCKER_TLS_CA`: TLS CA `TRAEFIK_PROVIDERS_DOCKER_TLS_CAOPTIONAL`: TLS CA.Optional (Default: ```false```) `TRAEFIK_PROVIDERS_DOCKER_TLS_CERT`: TLS cert `TRAEFIK_PROVIDERS_DOCKER_TLS_INSECURESKIPVERIFY`: TLS insecure skip verify (Default: ```false```) `TRAEFIK_PROVIDERS_DOCKER_TLS_KEY`: TLS key `TRAEFIK_PROVIDERS_DOCKER_USEBINDPORTIP`: Use the ip address from the bound port, rather than from the inner network. (Default: ```false```) `TRAEFIK_PROVIDERS_DOCKER_WATCH`: Watch Docker Swarm events. (Default: ```true```) `TRAEFIK_PROVIDERS_ECS`: Enable AWS ECS backend with default settings. (Default: ```false```) `TRAEFIK_PROVIDERS_ECS_ACCESSKEYID`: The AWS credentials access key to use for making requests `TRAEFIK_PROVIDERS_ECS_AUTODISCOVERCLUSTERS`: Auto discover cluster (Default: ```false```) `TRAEFIK_PROVIDERS_ECS_CLUSTERS`: ECS Clusters name (Default: ```default```) `TRAEFIK_PROVIDERS_ECS_CONSTRAINTS`: Constraints is an expression that Traefik matches against the container's labels to determine whether to create any route for that container. `TRAEFIK_PROVIDERS_ECS_DEFAULTRULE`: Default rule. (Default: ```Host(`{{ normalize .Name }}`)```) `TRAEFIK_PROVIDERS_ECS_EXPOSEDBYDEFAULT`: Expose services by default (Default: ```true```) `TRAEFIK_PROVIDERS_ECS_REFRESHSECONDS`: Polling interval (in seconds) (Default: ```15```) `TRAEFIK_PROVIDERS_ECS_REGION`: The AWS region to use for requests `TRAEFIK_PROVIDERS_ECS_SECRETACCESSKEY`: The AWS credentials access key to use for making requests `TRAEFIK_PROVIDERS_ETCD`: Enable Etcd backend with default settings. (Default: ```false```) `TRAEFIK_PROVIDERS_ETCD_ENDPOINTS`: KV store endpoints (Default: ```127.0.0.1:2379```) `TRAEFIK_PROVIDERS_ETCD_PASSWORD`: KV Password `TRAEFIK_PROVIDERS_ETCD_ROOTKEY`: Root key used for KV store (Default: ```traefik```) `TRAEFIK_PROVIDERS_ETCD_TLS_CA`: TLS CA `TRAEFIK_PROVIDERS_ETCD_TLS_CAOPTIONAL`: TLS CA.Optional (Default: ```false```) `TRAEFIK_PROVIDERS_ETCD_TLS_CERT`: TLS cert `TRAEFIK_PROVIDERS_ETCD_TLS_INSECURESKIPVERIFY`: TLS insecure skip verify (Default: ```false```) `TRAEFIK_PROVIDERS_ETCD_TLS_KEY`: TLS key `TRAEFIK_PROVIDERS_ETCD_USERNAME`: KV Username `TRAEFIK_PROVIDERS_FILE_DEBUGLOGGENERATEDTEMPLATE`: Enable debug logging of generated configuration template. (Default: ```false```) `TRAEFIK_PROVIDERS_FILE_DIRECTORY`: Load dynamic configuration from one or more .toml or .yml files in a directory. `TRAEFIK_PROVIDERS_FILE_FILENAME`: Load dynamic configuration from a file. `TRAEFIK_PROVIDERS_FILE_WATCH`: Watch provider. (Default: ```true```) `TRAEFIK_PROVIDERS_HTTP`: Enable HTTP backend with default settings. (Default: ```false```) `TRAEFIK_PROVIDERS_HTTP_ENDPOINT`: Load configuration from this endpoint. `TRAEFIK_PROVIDERS_HTTP_POLLINTERVAL`: Polling interval for endpoint. (Default: ```5```) `TRAEFIK_PROVIDERS_HTTP_POLLTIMEOUT`: Polling timeout for endpoint. (Default: ```5```) `TRAEFIK_PROVIDERS_HTTP_TLS_CA`: TLS CA `TRAEFIK_PROVIDERS_HTTP_TLS_CAOPTIONAL`: TLS CA.Optional (Default: ```false```) `TRAEFIK_PROVIDERS_HTTP_TLS_CERT`: TLS cert `TRAEFIK_PROVIDERS_HTTP_TLS_INSECURESKIPVERIFY`: TLS insecure skip verify (Default: ```false```) `TRAEFIK_PROVIDERS_HTTP_TLS_KEY`: TLS key `TRAEFIK_PROVIDERS_KUBERNETESCRD`: Enable Kubernetes backend with default settings. (Default: ```false```) `TRAEFIK_PROVIDERS_KUBERNETESCRD_ALLOWCROSSNAMESPACE`: Allow cross namespace resource reference. (Default: ```true```) `TRAEFIK_PROVIDERS_KUBERNETESCRD_CERTAUTHFILEPATH`: Kubernetes certificate authority file path (not needed for in-cluster client). `TRAEFIK_PROVIDERS_KUBERNETESCRD_ENDPOINT`: Kubernetes server endpoint (required for external cluster client). `TRAEFIK_PROVIDERS_KUBERNETESCRD_INGRESSCLASS`: Value of kubernetes.io/ingress.class annotation to watch for. `TRAEFIK_PROVIDERS_KUBERNETESCRD_LABELSELECTOR`: Kubernetes label selector to use. `TRAEFIK_PROVIDERS_KUBERNETESCRD_NAMESPACES`: Kubernetes namespaces. `TRAEFIK_PROVIDERS_KUBERNETESCRD_THROTTLEDURATION`: Ingress refresh throttle duration (Default: ```0```) `TRAEFIK_PROVIDERS_KUBERNETESCRD_TOKEN`: Kubernetes bearer token (not needed for in-cluster client). `TRAEFIK_PROVIDERS_KUBERNETESGATEWAY`: Enable Kubernetes gateway api provider with default settings. (Default: ```false```) `TRAEFIK_PROVIDERS_KUBERNETESGATEWAY_CERTAUTHFILEPATH`: Kubernetes certificate authority file path (not needed for in-cluster client). `TRAEFIK_PROVIDERS_KUBERNETESGATEWAY_ENDPOINT`: Kubernetes server endpoint (required for external cluster client). `TRAEFIK_PROVIDERS_KUBERNETESGATEWAY_LABELSELECTOR`: Kubernetes label selector to select specific GatewayClasses. `TRAEFIK_PROVIDERS_KUBERNETESGATEWAY_NAMESPACES`: Kubernetes namespaces. `TRAEFIK_PROVIDERS_KUBERNETESGATEWAY_THROTTLEDURATION`: Kubernetes refresh throttle duration (Default: ```0```) `TRAEFIK_PROVIDERS_KUBERNETESGATEWAY_TOKEN`: Kubernetes bearer token (not needed for in-cluster client). `TRAEFIK_PROVIDERS_KUBERNETESINGRESS`: Enable Kubernetes backend with default settings. (Default: ```false```) `TRAEFIK_PROVIDERS_KUBERNETESINGRESS_CERTAUTHFILEPATH`: Kubernetes certificate authority file path (not needed for in-cluster client). `TRAEFIK_PROVIDERS_KUBERNETESINGRESS_ENDPOINT`: Kubernetes server endpoint (required for external cluster client). `TRAEFIK_PROVIDERS_KUBERNETESINGRESS_INGRESSCLASS`: Value of kubernetes.io/ingress.class annotation to watch for. `TRAEFIK_PROVIDERS_KUBERNETESINGRESS_INGRESSENDPOINT_HOSTNAME`: Hostname used for Kubernetes Ingress endpoints. `TRAEFIK_PROVIDERS_KUBERNETESINGRESS_INGRESSENDPOINT_IP`: IP used for Kubernetes Ingress endpoints. `TRAEFIK_PROVIDERS_KUBERNETESINGRESS_INGRESSENDPOINT_PUBLISHEDSERVICE`: Published Kubernetes Service to copy status from. `TRAEFIK_PROVIDERS_KUBERNETESINGRESS_LABELSELECTOR`: Kubernetes Ingress label selector to use. `TRAEFIK_PROVIDERS_KUBERNETESINGRESS_NAMESPACES`: Kubernetes namespaces. `TRAEFIK_PROVIDERS_KUBERNETESINGRESS_THROTTLEDURATION`: Ingress refresh throttle duration (Default: ```0```) `TRAEFIK_PROVIDERS_KUBERNETESINGRESS_TOKEN`: Kubernetes bearer token (not needed for in-cluster client). `TRAEFIK_PROVIDERS_MARATHON`: Enable Marathon backend with default settings. (Default: ```false```) `TRAEFIK_PROVIDERS_MARATHON_BASIC_HTTPBASICAUTHUSER`: Basic authentication User. `TRAEFIK_PROVIDERS_MARATHON_BASIC_HTTPBASICPASSWORD`: Basic authentication Password. `TRAEFIK_PROVIDERS_MARATHON_CONSTRAINTS`: Constraints is an expression that Traefik matches against the application's labels to determine whether to create any route for that application. `TRAEFIK_PROVIDERS_MARATHON_DCOSTOKEN`: DCOSToken for DCOS environment, This will override the Authorization header. `TRAEFIK_PROVIDERS_MARATHON_DEFAULTRULE`: Default rule. (Default: ```Host(`{{ normalize .Name }}`)```) `TRAEFIK_PROVIDERS_MARATHON_DIALERTIMEOUT`: Set a dialer timeout for Marathon. (Default: ```5```) `TRAEFIK_PROVIDERS_MARATHON_ENDPOINT`: Marathon server endpoint. You can also specify multiple endpoint for Marathon. (Default: ```http://127.0.0.1:8080```) `TRAEFIK_PROVIDERS_MARATHON_EXPOSEDBYDEFAULT`: Expose Marathon apps by default. (Default: ```true```) `TRAEFIK_PROVIDERS_MARATHON_FORCETASKHOSTNAME`: Force to use the task's hostname. (Default: ```false```) `TRAEFIK_PROVIDERS_MARATHON_KEEPALIVE`: Set a TCP Keep Alive time. (Default: ```10```) `TRAEFIK_PROVIDERS_MARATHON_RESPECTREADINESSCHECKS`: Filter out tasks with non-successful readiness checks during deployments. (Default: ```false```) `TRAEFIK_PROVIDERS_MARATHON_RESPONSEHEADERTIMEOUT`: Set a response header timeout for Marathon. (Default: ```60```) `TRAEFIK_PROVIDERS_MARATHON_TLSHANDSHAKETIMEOUT`: Set a TLS handshake timeout for Marathon. (Default: ```5```) `TRAEFIK_PROVIDERS_MARATHON_TLS_CA`: TLS CA `TRAEFIK_PROVIDERS_MARATHON_TLS_CAOPTIONAL`: TLS CA.Optional (Default: ```false```) `TRAEFIK_PROVIDERS_MARATHON_TLS_CERT`: TLS cert `TRAEFIK_PROVIDERS_MARATHON_TLS_INSECURESKIPVERIFY`: TLS insecure skip verify (Default: ```false```) `TRAEFIK_PROVIDERS_MARATHON_TLS_KEY`: TLS key `TRAEFIK_PROVIDERS_MARATHON_TRACE`: Display additional provider logs. (Default: ```false```) `TRAEFIK_PROVIDERS_MARATHON_WATCH`: Watch provider. (Default: ```true```) `TRAEFIK_PROVIDERS_PROVIDERSTHROTTLEDURATION`: Backends throttle duration: minimum duration between 2 events from providers before applying a new configuration. It avoids unnecessary reloads if multiples events are sent in a short amount of time. (Default: ```0```) `TRAEFIK_PROVIDERS_RANCHER`: Enable Rancher backend with default settings. (Default: ```false```) `TRAEFIK_PROVIDERS_RANCHER_CONSTRAINTS`: Constraints is an expression that Traefik matches against the container's labels to determine whether to create any route for that container. `TRAEFIK_PROVIDERS_RANCHER_DEFAULTRULE`: Default rule. (Default: ```Host(`{{ normalize .Name }}`)```) `TRAEFIK_PROVIDERS_RANCHER_ENABLESERVICEHEALTHFILTER`: Filter services with unhealthy states and inactive states. (Default: ```true```) `TRAEFIK_PROVIDERS_RANCHER_EXPOSEDBYDEFAULT`: Expose containers by default. (Default: ```true```) `TRAEFIK_PROVIDERS_RANCHER_INTERVALPOLL`: Poll the Rancher metadata service every 'rancher.refreshseconds' (less accurate). (Default: ```false```) `TRAEFIK_PROVIDERS_RANCHER_PREFIX`: Prefix used for accessing the Rancher metadata service. (Default: ```latest```) `TRAEFIK_PROVIDERS_RANCHER_REFRESHSECONDS`: Defines the polling interval in seconds. (Default: ```15```) `TRAEFIK_PROVIDERS_RANCHER_WATCH`: Watch provider. (Default: ```true```) `TRAEFIK_PROVIDERS_REDIS`: Enable Redis backend with default settings. (Default: ```false```) `TRAEFIK_PROVIDERS_REDIS_ENDPOINTS`: KV store endpoints (Default: ```127.0.0.1:6379```) `TRAEFIK_PROVIDERS_REDIS_PASSWORD`: KV Password `TRAEFIK_PROVIDERS_REDIS_ROOTKEY`: Root key used for KV store (Default: ```traefik```) `TRAEFIK_PROVIDERS_REDIS_TLS_CA`: TLS CA `TRAEFIK_PROVIDERS_REDIS_TLS_CAOPTIONAL`: TLS CA.Optional (Default: ```false```) `TRAEFIK_PROVIDERS_REDIS_TLS_CERT`: TLS cert `TRAEFIK_PROVIDERS_REDIS_TLS_INSECURESKIPVERIFY`: TLS insecure skip verify (Default: ```false```) `TRAEFIK_PROVIDERS_REDIS_TLS_KEY`: TLS key `TRAEFIK_PROVIDERS_REDIS_USERNAME`: KV Username `TRAEFIK_PROVIDERS_REST`: Enable Rest backend with default settings. (Default: ```false```) `TRAEFIK_PROVIDERS_REST_INSECURE`: Activate REST Provider directly on the entryPoint named traefik. (Default: ```false```) `TRAEFIK_PROVIDERS_ZOOKEEPER`: Enable ZooKeeper backend with default settings. (Default: ```false```) `TRAEFIK_PROVIDERS_ZOOKEEPER_ENDPOINTS`: KV store endpoints (Default: ```127.0.0.1:2181```) `TRAEFIK_PROVIDERS_ZOOKEEPER_PASSWORD`: KV Password `TRAEFIK_PROVIDERS_ZOOKEEPER_ROOTKEY`: Root key used for KV store (Default: ```traefik```) `TRAEFIK_PROVIDERS_ZOOKEEPER_TLS_CA`: TLS CA `TRAEFIK_PROVIDERS_ZOOKEEPER_TLS_CAOPTIONAL`: TLS CA.Optional (Default: ```false```) `TRAEFIK_PROVIDERS_ZOOKEEPER_TLS_CERT`: TLS cert `TRAEFIK_PROVIDERS_ZOOKEEPER_TLS_INSECURESKIPVERIFY`: TLS insecure skip verify (Default: ```false```) `TRAEFIK_PROVIDERS_ZOOKEEPER_TLS_KEY`: TLS key `TRAEFIK_PROVIDERS_ZOOKEEPER_USERNAME`: KV Username `TRAEFIK_SERVERSTRANSPORT_FORWARDINGTIMEOUTS_DIALTIMEOUT`: The amount of time to wait until a connection to a backend server can be established. If zero, no timeout exists. (Default: ```30```) `TRAEFIK_SERVERSTRANSPORT_FORWARDINGTIMEOUTS_IDLECONNTIMEOUT`: The maximum period for which an idle HTTP keep-alive connection will remain open before closing itself (Default: ```90```) `TRAEFIK_SERVERSTRANSPORT_FORWARDINGTIMEOUTS_RESPONSEHEADERTIMEOUT`: The amount of time to wait for a server's response headers after fully writing the request (including its body, if any). If zero, no timeout exists. (Default: ```0```) `TRAEFIK_SERVERSTRANSPORT_INSECURESKIPVERIFY`: Disable SSL certificate verification. (Default: ```false```) `TRAEFIK_SERVERSTRANSPORT_MAXIDLECONNSPERHOST`: If non-zero, controls the maximum idle (keep-alive) to keep per-host. If zero, DefaultMaxIdleConnsPerHost is used (Default: ```0```) `TRAEFIK_SERVERSTRANSPORT_ROOTCAS`: Add cert file for self-signed certificate. `TRAEFIK_TRACING`: OpenTracing configuration. (Default: ```false```) `TRAEFIK_TRACING_DATADOG`: Settings for Datadog. (Default: ```false```) `TRAEFIK_TRACING_DATADOG_BAGAGEPREFIXHEADERNAME`: Specifies the header name prefix that will be used to store baggage items in a map. `TRAEFIK_TRACING_DATADOG_DEBUG`: Enable Datadog debug. (Default: ```false```) `TRAEFIK_TRACING_DATADOG_GLOBALTAG`: Key:Value tag to be set on all the spans. `TRAEFIK_TRACING_DATADOG_LOCALAGENTHOSTPORT`: Set datadog-agent's host:port that the reporter will used. (Default: ```localhost:8126```) `TRAEFIK_TRACING_DATADOG_PARENTIDHEADERNAME`: Specifies the header name that will be used to store the parent ID. `TRAEFIK_TRACING_DATADOG_PRIORITYSAMPLING`: Enable priority sampling. When using distributed tracing, this option must be enabled in order to get all the parts of a distributed trace sampled. (Default: ```false```) `TRAEFIK_TRACING_DATADOG_SAMPLINGPRIORITYHEADERNAME`: Specifies the header name that will be used to store the sampling priority. `TRAEFIK_TRACING_DATADOG_TRACEIDHEADERNAME`: Specifies the header name that will be used to store the trace ID. `TRAEFIK_TRACING_ELASTIC`: Settings for Elastic. (Default: ```false```) `TRAEFIK_TRACING_ELASTIC_SECRETTOKEN`: Set the token used to connect to Elastic APM Server. `TRAEFIK_TRACING_ELASTIC_SERVERURL`: Set the URL of the Elastic APM server. `TRAEFIK_TRACING_ELASTIC_SERVICEENVIRONMENT`: Set the name of the environment Traefik is deployed in, e.g. 'production' or 'staging'. `TRAEFIK_TRACING_HAYSTACK`: Settings for Haystack. (Default: ```false```) `TRAEFIK_TRACING_HAYSTACK_BAGGAGEPREFIXHEADERNAME`: Specifies the header name prefix that will be used to store baggage items in a map. `TRAEFIK_TRACING_HAYSTACK_GLOBALTAG`: Key:Value tag to be set on all the spans. `TRAEFIK_TRACING_HAYSTACK_LOCALAGENTHOST`: Set haystack-agent's host that the reporter will used. (Default: ```127.0.0.1```) `TRAEFIK_TRACING_HAYSTACK_LOCALAGENTPORT`: Set haystack-agent's port that the reporter will used. (Default: ```35000```) `TRAEFIK_TRACING_HAYSTACK_PARENTIDHEADERNAME`: Specifies the header name that will be used to store the parent ID. `TRAEFIK_TRACING_HAYSTACK_SPANIDHEADERNAME`: Specifies the header name that will be used to store the span ID. `TRAEFIK_TRACING_HAYSTACK_TRACEIDHEADERNAME`: Specifies the header name that will be used to store the trace ID. `TRAEFIK_TRACING_INSTANA`: Settings for Instana. (Default: ```false```) `TRAEFIK_TRACING_INSTANA_LOCALAGENTHOST`: Set instana-agent's host that the reporter will used. `TRAEFIK_TRACING_INSTANA_LOCALAGENTPORT`: Set instana-agent's port that the reporter will used. (Default: ```42699```) `TRAEFIK_TRACING_INSTANA_LOGLEVEL`: Set instana-agent's log level. ('error','warn','info','debug') (Default: ```info```) `TRAEFIK_TRACING_JAEGER`: Settings for Jaeger. (Default: ```false```) `TRAEFIK_TRACING_JAEGER_COLLECTOR_ENDPOINT`: Instructs reporter to send spans to jaeger-collector at this URL. `TRAEFIK_TRACING_JAEGER_COLLECTOR_PASSWORD`: Password for basic http authentication when sending spans to jaeger-collector. `TRAEFIK_TRACING_JAEGER_COLLECTOR_USER`: User for basic http authentication when sending spans to jaeger-collector. `TRAEFIK_TRACING_JAEGER_DISABLEATTEMPTRECONNECTING`: Disable the periodic re-resolution of the agent's hostname and reconnection if there was a change. (Default: ```true```) `TRAEFIK_TRACING_JAEGER_GEN128BIT`: Generate 128 bit span IDs. (Default: ```false```) `TRAEFIK_TRACING_JAEGER_LOCALAGENTHOSTPORT`: Set jaeger-agent's host:port that the reporter will used. (Default: ```127.0.0.1:6831```) `TRAEFIK_TRACING_JAEGER_PROPAGATION`: Which propagation format to use (jaeger/b3). (Default: ```jaeger```) `TRAEFIK_TRACING_JAEGER_SAMPLINGPARAM`: Set the sampling parameter. (Default: ```1.000000```) `TRAEFIK_TRACING_JAEGER_SAMPLINGSERVERURL`: Set the sampling server url. (Default: ```http://localhost:5778/sampling```) `TRAEFIK_TRACING_JAEGER_SAMPLINGTYPE`: Set the sampling type. (Default: ```const```) `TRAEFIK_TRACING_JAEGER_TRACECONTEXTHEADERNAME`: Set the header to use for the trace-id. (Default: ```uber-trace-id```) `TRAEFIK_TRACING_SERVICENAME`: Set the name for this service. (Default: ```traefik```) `TRAEFIK_TRACING_SPANNAMELIMIT`: Set the maximum character limit for Span names (default 0 = no limit). (Default: ```0```) `TRAEFIK_TRACING_ZIPKIN`: Settings for Zipkin. (Default: ```false```) `TRAEFIK_TRACING_ZIPKIN_HTTPENDPOINT`: HTTP Endpoint to report traces to. (Default: ```http://localhost:9411/api/v2/spans```) `TRAEFIK_TRACING_ZIPKIN_ID128BIT`: Use Zipkin 128 bit root span IDs. (Default: ```true```) `TRAEFIK_TRACING_ZIPKIN_SAMESPAN`: Use Zipkin SameSpan RPC style traces. (Default: ```false```) `TRAEFIK_TRACING_ZIPKIN_SAMPLERATE`: The rate between 0.0 and 1.0 of requests to trace. (Default: ```1.000000```)