829 lines
28 KiB
Markdown
829 lines
28 KiB
Markdown
<!--
|
|
CODE GENERATED AUTOMATICALLY
|
|
THIS FILE MUST NOT BE EDITED BY HAND
|
|
-->
|
|
|
|
`TRAEFIK_ACCESSLOG`:
|
|
Access log settings. (Default: ```false```)
|
|
|
|
`TRAEFIK_ACCESSLOG_BUFFERINGSIZE`:
|
|
Number of access log lines to process in a buffered way. (Default: ```0```)
|
|
|
|
`TRAEFIK_ACCESSLOG_FIELDS_DEFAULTMODE`:
|
|
Default mode for fields: keep | drop (Default: ```keep```)
|
|
|
|
`TRAEFIK_ACCESSLOG_FIELDS_HEADERS_DEFAULTMODE`:
|
|
Default mode for fields: keep | drop | redact (Default: ```drop```)
|
|
|
|
`TRAEFIK_ACCESSLOG_FIELDS_HEADERS_NAMES_<NAME>`:
|
|
Override mode for headers
|
|
|
|
`TRAEFIK_ACCESSLOG_FIELDS_NAMES_<NAME>`:
|
|
Override mode for fields
|
|
|
|
`TRAEFIK_ACCESSLOG_FILEPATH`:
|
|
Access log file path. Stdout is used when omitted or empty.
|
|
|
|
`TRAEFIK_ACCESSLOG_FILTERS_MINDURATION`:
|
|
Keep access logs when request took longer than the specified duration. (Default: ```0```)
|
|
|
|
`TRAEFIK_ACCESSLOG_FILTERS_RETRYATTEMPTS`:
|
|
Keep access logs when at least one retry happened. (Default: ```false```)
|
|
|
|
`TRAEFIK_ACCESSLOG_FILTERS_STATUSCODES`:
|
|
Keep access logs with status codes in the specified range.
|
|
|
|
`TRAEFIK_ACCESSLOG_FORMAT`:
|
|
Access log format: json | common (Default: ```common```)
|
|
|
|
`TRAEFIK_API`:
|
|
Enable api/dashboard. (Default: ```false```)
|
|
|
|
`TRAEFIK_API_DASHBOARD`:
|
|
Activate dashboard. (Default: ```true```)
|
|
|
|
`TRAEFIK_API_DEBUG`:
|
|
Enable additional endpoints for debugging and profiling. (Default: ```false```)
|
|
|
|
`TRAEFIK_API_INSECURE`:
|
|
Activate API directly on the entryPoint named traefik. (Default: ```false```)
|
|
|
|
`TRAEFIK_CERTIFICATESRESOLVERS_<NAME>`:
|
|
Certificates resolvers configuration. (Default: ```false```)
|
|
|
|
`TRAEFIK_CERTIFICATESRESOLVERS_<NAME>_ACME_CASERVER`:
|
|
CA server to use. (Default: ```https://acme-v02.api.letsencrypt.org/directory```)
|
|
|
|
`TRAEFIK_CERTIFICATESRESOLVERS_<NAME>_ACME_DNSCHALLENGE`:
|
|
Activate DNS-01 Challenge. (Default: ```false```)
|
|
|
|
`TRAEFIK_CERTIFICATESRESOLVERS_<NAME>_ACME_DNSCHALLENGE_DELAYBEFORECHECK`:
|
|
Assume DNS propagates after a delay in seconds rather than finding and querying nameservers. (Default: ```0```)
|
|
|
|
`TRAEFIK_CERTIFICATESRESOLVERS_<NAME>_ACME_DNSCHALLENGE_DISABLEPROPAGATIONCHECK`:
|
|
Disable the DNS propagation checks before notifying ACME that the DNS challenge is ready. [not recommended] (Default: ```false```)
|
|
|
|
`TRAEFIK_CERTIFICATESRESOLVERS_<NAME>_ACME_DNSCHALLENGE_PROVIDER`:
|
|
Use a DNS-01 based challenge provider rather than HTTPS.
|
|
|
|
`TRAEFIK_CERTIFICATESRESOLVERS_<NAME>_ACME_DNSCHALLENGE_RESOLVERS`:
|
|
Use following DNS servers to resolve the FQDN authority.
|
|
|
|
`TRAEFIK_CERTIFICATESRESOLVERS_<NAME>_ACME_EMAIL`:
|
|
Email address used for registration.
|
|
|
|
`TRAEFIK_CERTIFICATESRESOLVERS_<NAME>_ACME_HTTPCHALLENGE`:
|
|
Activate HTTP-01 Challenge. (Default: ```false```)
|
|
|
|
`TRAEFIK_CERTIFICATESRESOLVERS_<NAME>_ACME_HTTPCHALLENGE_ENTRYPOINT`:
|
|
HTTP challenge EntryPoint
|
|
|
|
`TRAEFIK_CERTIFICATESRESOLVERS_<NAME>_ACME_KEYTYPE`:
|
|
KeyType used for generating certificate private key. Allow value 'EC256', 'EC384', 'RSA2048', 'RSA4096', 'RSA8192'. (Default: ```RSA4096```)
|
|
|
|
`TRAEFIK_CERTIFICATESRESOLVERS_<NAME>_ACME_STORAGE`:
|
|
Storage to use. (Default: ```acme.json```)
|
|
|
|
`TRAEFIK_CERTIFICATESRESOLVERS_<NAME>_ACME_TLSCHALLENGE`:
|
|
Activate TLS-ALPN-01 Challenge. (Default: ```true```)
|
|
|
|
`TRAEFIK_ENTRYPOINTS_<NAME>`:
|
|
Entry points definition. (Default: ```false```)
|
|
|
|
`TRAEFIK_ENTRYPOINTS_<NAME>_ADDRESS`:
|
|
Entry point address.
|
|
|
|
`TRAEFIK_ENTRYPOINTS_<NAME>_FORWARDEDHEADERS_INSECURE`:
|
|
Trust all forwarded headers. (Default: ```false```)
|
|
|
|
`TRAEFIK_ENTRYPOINTS_<NAME>_FORWARDEDHEADERS_TRUSTEDIPS`:
|
|
Trust only forwarded headers from selected IPs.
|
|
|
|
`TRAEFIK_ENTRYPOINTS_<NAME>_HTTP`:
|
|
HTTP configuration.
|
|
|
|
`TRAEFIK_ENTRYPOINTS_<NAME>_HTTP_MIDDLEWARES`:
|
|
Default middlewares for the routers linked to the entry point.
|
|
|
|
`TRAEFIK_ENTRYPOINTS_<NAME>_HTTP_REDIRECTIONS_ENTRYPOINT_PERMANENT`:
|
|
Applies a permanent redirection. (Default: ```true```)
|
|
|
|
`TRAEFIK_ENTRYPOINTS_<NAME>_HTTP_REDIRECTIONS_ENTRYPOINT_PRIORITY`:
|
|
Priority of the generated router. (Default: ```2147483647```)
|
|
|
|
`TRAEFIK_ENTRYPOINTS_<NAME>_HTTP_REDIRECTIONS_ENTRYPOINT_SCHEME`:
|
|
Scheme used for the redirection. (Default: ```https```)
|
|
|
|
`TRAEFIK_ENTRYPOINTS_<NAME>_HTTP_REDIRECTIONS_ENTRYPOINT_TO`:
|
|
Targeted entry point of the redirection.
|
|
|
|
`TRAEFIK_ENTRYPOINTS_<NAME>_HTTP_TLS`:
|
|
Default TLS configuration for the routers linked to the entry point. (Default: ```false```)
|
|
|
|
`TRAEFIK_ENTRYPOINTS_<NAME>_HTTP_TLS_CERTRESOLVER`:
|
|
Default certificate resolver for the routers linked to the entry point.
|
|
|
|
`TRAEFIK_ENTRYPOINTS_<NAME>_HTTP_TLS_DOMAINS`:
|
|
Default TLS domains for the routers linked to the entry point.
|
|
|
|
`TRAEFIK_ENTRYPOINTS_<NAME>_HTTP_TLS_DOMAINS[n]_MAIN`:
|
|
Default subject name.
|
|
|
|
`TRAEFIK_ENTRYPOINTS_<NAME>_HTTP_TLS_DOMAINS[n]_SANS`:
|
|
Subject alternative names.
|
|
|
|
`TRAEFIK_ENTRYPOINTS_<NAME>_HTTP_TLS_OPTIONS`:
|
|
Default TLS options for the routers linked to the entry point.
|
|
|
|
`TRAEFIK_ENTRYPOINTS_<NAME>_PROXYPROTOCOL`:
|
|
Proxy-Protocol configuration. (Default: ```false```)
|
|
|
|
`TRAEFIK_ENTRYPOINTS_<NAME>_PROXYPROTOCOL_INSECURE`:
|
|
Trust all. (Default: ```false```)
|
|
|
|
`TRAEFIK_ENTRYPOINTS_<NAME>_PROXYPROTOCOL_TRUSTEDIPS`:
|
|
Trust only selected IPs.
|
|
|
|
`TRAEFIK_ENTRYPOINTS_<NAME>_TRANSPORT_LIFECYCLE_GRACETIMEOUT`:
|
|
Duration to give active requests a chance to finish before Traefik stops. (Default: ```10```)
|
|
|
|
`TRAEFIK_ENTRYPOINTS_<NAME>_TRANSPORT_LIFECYCLE_REQUESTACCEPTGRACETIMEOUT`:
|
|
Duration to keep accepting requests before Traefik initiates the graceful shutdown procedure. (Default: ```0```)
|
|
|
|
`TRAEFIK_ENTRYPOINTS_<NAME>_TRANSPORT_RESPONDINGTIMEOUTS_IDLETIMEOUT`:
|
|
IdleTimeout is the maximum amount duration an idle (keep-alive) connection will remain idle before closing itself. If zero, no timeout is set. (Default: ```180```)
|
|
|
|
`TRAEFIK_ENTRYPOINTS_<NAME>_TRANSPORT_RESPONDINGTIMEOUTS_READTIMEOUT`:
|
|
ReadTimeout is the maximum duration for reading the entire request, including the body. If zero, no timeout is set. (Default: ```0```)
|
|
|
|
`TRAEFIK_ENTRYPOINTS_<NAME>_TRANSPORT_RESPONDINGTIMEOUTS_WRITETIMEOUT`:
|
|
WriteTimeout is the maximum duration before timing out writes of the response. If zero, no timeout is set. (Default: ```0```)
|
|
|
|
`TRAEFIK_GLOBAL_CHECKNEWVERSION`:
|
|
Periodically check if a new version has been released. (Default: ```false```)
|
|
|
|
`TRAEFIK_GLOBAL_SENDANONYMOUSUSAGE`:
|
|
Periodically send anonymous usage statistics. If the option is not specified, it will be enabled by default. (Default: ```false```)
|
|
|
|
`TRAEFIK_HOSTRESOLVER`:
|
|
Enable CNAME Flattening. (Default: ```false```)
|
|
|
|
`TRAEFIK_HOSTRESOLVER_CNAMEFLATTENING`:
|
|
A flag to enable/disable CNAME flattening (Default: ```false```)
|
|
|
|
`TRAEFIK_HOSTRESOLVER_RESOLVCONFIG`:
|
|
resolv.conf used for DNS resolving (Default: ```/etc/resolv.conf```)
|
|
|
|
`TRAEFIK_HOSTRESOLVER_RESOLVDEPTH`:
|
|
The maximal depth of DNS recursive resolving (Default: ```5```)
|
|
|
|
`TRAEFIK_LOG`:
|
|
Traefik log settings. (Default: ```false```)
|
|
|
|
`TRAEFIK_LOG_FILEPATH`:
|
|
Traefik log file path. Stdout is used when omitted or empty.
|
|
|
|
`TRAEFIK_LOG_FORMAT`:
|
|
Traefik log format: json | common (Default: ```common```)
|
|
|
|
`TRAEFIK_LOG_LEVEL`:
|
|
Log level set to traefik logs. (Default: ```ERROR```)
|
|
|
|
`TRAEFIK_METRICS_DATADOG`:
|
|
Datadog metrics exporter type. (Default: ```false```)
|
|
|
|
`TRAEFIK_METRICS_DATADOG_ADDENTRYPOINTSLABELS`:
|
|
Enable metrics on entry points. (Default: ```true```)
|
|
|
|
`TRAEFIK_METRICS_DATADOG_ADDRESS`:
|
|
Datadog's address. (Default: ```localhost:8125```)
|
|
|
|
`TRAEFIK_METRICS_DATADOG_ADDSERVICESLABELS`:
|
|
Enable metrics on services. (Default: ```true```)
|
|
|
|
`TRAEFIK_METRICS_DATADOG_PUSHINTERVAL`:
|
|
Datadog push interval. (Default: ```10```)
|
|
|
|
`TRAEFIK_METRICS_INFLUXDB`:
|
|
InfluxDB metrics exporter type. (Default: ```false```)
|
|
|
|
`TRAEFIK_METRICS_INFLUXDB_ADDENTRYPOINTSLABELS`:
|
|
Enable metrics on entry points. (Default: ```true```)
|
|
|
|
`TRAEFIK_METRICS_INFLUXDB_ADDRESS`:
|
|
InfluxDB address. (Default: ```localhost:8089```)
|
|
|
|
`TRAEFIK_METRICS_INFLUXDB_ADDSERVICESLABELS`:
|
|
Enable metrics on services. (Default: ```true```)
|
|
|
|
`TRAEFIK_METRICS_INFLUXDB_DATABASE`:
|
|
InfluxDB database used when protocol is http.
|
|
|
|
`TRAEFIK_METRICS_INFLUXDB_PASSWORD`:
|
|
InfluxDB password (only with http).
|
|
|
|
`TRAEFIK_METRICS_INFLUXDB_PROTOCOL`:
|
|
InfluxDB address protocol (udp or http). (Default: ```udp```)
|
|
|
|
`TRAEFIK_METRICS_INFLUXDB_PUSHINTERVAL`:
|
|
InfluxDB push interval. (Default: ```10```)
|
|
|
|
`TRAEFIK_METRICS_INFLUXDB_RETENTIONPOLICY`:
|
|
InfluxDB retention policy used when protocol is http.
|
|
|
|
`TRAEFIK_METRICS_INFLUXDB_USERNAME`:
|
|
InfluxDB username (only with http).
|
|
|
|
`TRAEFIK_METRICS_PROMETHEUS`:
|
|
Prometheus metrics exporter type. (Default: ```false```)
|
|
|
|
`TRAEFIK_METRICS_PROMETHEUS_ADDENTRYPOINTSLABELS`:
|
|
Enable metrics on entry points. (Default: ```true```)
|
|
|
|
`TRAEFIK_METRICS_PROMETHEUS_ADDSERVICESLABELS`:
|
|
Enable metrics on services. (Default: ```true```)
|
|
|
|
`TRAEFIK_METRICS_PROMETHEUS_BUCKETS`:
|
|
Buckets for latency metrics. (Default: ```0.100000, 0.300000, 1.200000, 5.000000```)
|
|
|
|
`TRAEFIK_METRICS_PROMETHEUS_ENTRYPOINT`:
|
|
EntryPoint (Default: ```traefik```)
|
|
|
|
`TRAEFIK_METRICS_PROMETHEUS_MANUALROUTING`:
|
|
Manual routing (Default: ```false```)
|
|
|
|
`TRAEFIK_METRICS_STATSD`:
|
|
StatsD metrics exporter type. (Default: ```false```)
|
|
|
|
`TRAEFIK_METRICS_STATSD_ADDENTRYPOINTSLABELS`:
|
|
Enable metrics on entry points. (Default: ```true```)
|
|
|
|
`TRAEFIK_METRICS_STATSD_ADDRESS`:
|
|
StatsD address. (Default: ```localhost:8125```)
|
|
|
|
`TRAEFIK_METRICS_STATSD_ADDSERVICESLABELS`:
|
|
Enable metrics on services. (Default: ```true```)
|
|
|
|
`TRAEFIK_METRICS_STATSD_PREFIX`:
|
|
Prefix to use for metrics collection. (Default: ```traefik```)
|
|
|
|
`TRAEFIK_METRICS_STATSD_PUSHINTERVAL`:
|
|
StatsD push interval. (Default: ```10```)
|
|
|
|
`TRAEFIK_PING`:
|
|
Enable ping. (Default: ```false```)
|
|
|
|
`TRAEFIK_PING_ENTRYPOINT`:
|
|
EntryPoint (Default: ```traefik```)
|
|
|
|
`TRAEFIK_PING_MANUALROUTING`:
|
|
Manual routing (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_CONSUL`:
|
|
Enable Consul backend with default settings. (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_CONSULCATALOG_CACHE`:
|
|
Use local agent caching for catalog reads. (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_CONSULCATALOG_CONSTRAINTS`:
|
|
Constraints is an expression that Traefik matches against the container's labels to determine whether to create any route for that container.
|
|
|
|
`TRAEFIK_PROVIDERS_CONSULCATALOG_DEFAULTRULE`:
|
|
Default rule. (Default: ```Host(`{{ normalize .Name }}`)```)
|
|
|
|
`TRAEFIK_PROVIDERS_CONSULCATALOG_ENDPOINT_ADDRESS`:
|
|
The address of the Consul server (Default: ```http://127.0.0.1:8500```)
|
|
|
|
`TRAEFIK_PROVIDERS_CONSULCATALOG_ENDPOINT_DATACENTER`:
|
|
Data center to use. If not provided, the default agent data center is used
|
|
|
|
`TRAEFIK_PROVIDERS_CONSULCATALOG_ENDPOINT_ENDPOINTWAITTIME`:
|
|
WaitTime limits how long a Watch will block. If not provided, the agent default values will be used (Default: ```0```)
|
|
|
|
`TRAEFIK_PROVIDERS_CONSULCATALOG_ENDPOINT_HTTPAUTH_PASSWORD`:
|
|
Basic Auth password
|
|
|
|
`TRAEFIK_PROVIDERS_CONSULCATALOG_ENDPOINT_HTTPAUTH_USERNAME`:
|
|
Basic Auth username
|
|
|
|
`TRAEFIK_PROVIDERS_CONSULCATALOG_ENDPOINT_SCHEME`:
|
|
The URI scheme for the Consul server
|
|
|
|
`TRAEFIK_PROVIDERS_CONSULCATALOG_ENDPOINT_TLS_CA`:
|
|
TLS CA
|
|
|
|
`TRAEFIK_PROVIDERS_CONSULCATALOG_ENDPOINT_TLS_CAOPTIONAL`:
|
|
TLS CA.Optional (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_CONSULCATALOG_ENDPOINT_TLS_CERT`:
|
|
TLS cert
|
|
|
|
`TRAEFIK_PROVIDERS_CONSULCATALOG_ENDPOINT_TLS_INSECURESKIPVERIFY`:
|
|
TLS insecure skip verify (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_CONSULCATALOG_ENDPOINT_TLS_KEY`:
|
|
TLS key
|
|
|
|
`TRAEFIK_PROVIDERS_CONSULCATALOG_ENDPOINT_TOKEN`:
|
|
Token is used to provide a per-request ACL token which overrides the agent's default token
|
|
|
|
`TRAEFIK_PROVIDERS_CONSULCATALOG_EXPOSEDBYDEFAULT`:
|
|
Expose containers by default. (Default: ```true```)
|
|
|
|
`TRAEFIK_PROVIDERS_CONSULCATALOG_PREFIX`:
|
|
Prefix for consul service tags. Default 'traefik' (Default: ```traefik```)
|
|
|
|
`TRAEFIK_PROVIDERS_CONSULCATALOG_REFRESHINTERVAL`:
|
|
Interval for check Consul API. Default 100ms (Default: ```15```)
|
|
|
|
`TRAEFIK_PROVIDERS_CONSULCATALOG_REQUIRECONSISTENT`:
|
|
Forces the read to be fully consistent. (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_CONSULCATALOG_STALE`:
|
|
Use stale consistency for catalog reads. (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_CONSUL_ENDPOINTS`:
|
|
KV store endpoints (Default: ```127.0.0.1:8500```)
|
|
|
|
`TRAEFIK_PROVIDERS_CONSUL_PASSWORD`:
|
|
KV Password
|
|
|
|
`TRAEFIK_PROVIDERS_CONSUL_ROOTKEY`:
|
|
Root key used for KV store (Default: ```traefik```)
|
|
|
|
`TRAEFIK_PROVIDERS_CONSUL_TLS_CA`:
|
|
TLS CA
|
|
|
|
`TRAEFIK_PROVIDERS_CONSUL_TLS_CAOPTIONAL`:
|
|
TLS CA.Optional (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_CONSUL_TLS_CERT`:
|
|
TLS cert
|
|
|
|
`TRAEFIK_PROVIDERS_CONSUL_TLS_INSECURESKIPVERIFY`:
|
|
TLS insecure skip verify (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_CONSUL_TLS_KEY`:
|
|
TLS key
|
|
|
|
`TRAEFIK_PROVIDERS_CONSUL_USERNAME`:
|
|
KV Username
|
|
|
|
`TRAEFIK_PROVIDERS_DOCKER`:
|
|
Enable Docker backend with default settings. (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_DOCKER_CONSTRAINTS`:
|
|
Constraints is an expression that Traefik matches against the container's labels to determine whether to create any route for that container.
|
|
|
|
`TRAEFIK_PROVIDERS_DOCKER_DEFAULTRULE`:
|
|
Default rule. (Default: ```Host(`{{ normalize .Name }}`)```)
|
|
|
|
`TRAEFIK_PROVIDERS_DOCKER_ENDPOINT`:
|
|
Docker server endpoint. Can be a tcp or a unix socket endpoint. (Default: ```unix:///var/run/docker.sock```)
|
|
|
|
`TRAEFIK_PROVIDERS_DOCKER_EXPOSEDBYDEFAULT`:
|
|
Expose containers by default. (Default: ```true```)
|
|
|
|
`TRAEFIK_PROVIDERS_DOCKER_NETWORK`:
|
|
Default Docker network used.
|
|
|
|
`TRAEFIK_PROVIDERS_DOCKER_SWARMMODE`:
|
|
Use Docker on Swarm Mode. (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_DOCKER_SWARMMODEREFRESHSECONDS`:
|
|
Polling interval for swarm mode. (Default: ```15```)
|
|
|
|
`TRAEFIK_PROVIDERS_DOCKER_TLS_CA`:
|
|
TLS CA
|
|
|
|
`TRAEFIK_PROVIDERS_DOCKER_TLS_CAOPTIONAL`:
|
|
TLS CA.Optional (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_DOCKER_TLS_CERT`:
|
|
TLS cert
|
|
|
|
`TRAEFIK_PROVIDERS_DOCKER_TLS_INSECURESKIPVERIFY`:
|
|
TLS insecure skip verify (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_DOCKER_TLS_KEY`:
|
|
TLS key
|
|
|
|
`TRAEFIK_PROVIDERS_DOCKER_USEBINDPORTIP`:
|
|
Use the ip address from the bound port, rather than from the inner network. (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_DOCKER_WATCH`:
|
|
Watch Docker Swarm events. (Default: ```true```)
|
|
|
|
`TRAEFIK_PROVIDERS_ETCD`:
|
|
Enable Etcd backend with default settings. (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_ETCD_ENDPOINTS`:
|
|
KV store endpoints (Default: ```127.0.0.1:2379```)
|
|
|
|
`TRAEFIK_PROVIDERS_ETCD_PASSWORD`:
|
|
KV Password
|
|
|
|
`TRAEFIK_PROVIDERS_ETCD_ROOTKEY`:
|
|
Root key used for KV store (Default: ```traefik```)
|
|
|
|
`TRAEFIK_PROVIDERS_ETCD_TLS_CA`:
|
|
TLS CA
|
|
|
|
`TRAEFIK_PROVIDERS_ETCD_TLS_CAOPTIONAL`:
|
|
TLS CA.Optional (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_ETCD_TLS_CERT`:
|
|
TLS cert
|
|
|
|
`TRAEFIK_PROVIDERS_ETCD_TLS_INSECURESKIPVERIFY`:
|
|
TLS insecure skip verify (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_ETCD_TLS_KEY`:
|
|
TLS key
|
|
|
|
`TRAEFIK_PROVIDERS_ETCD_USERNAME`:
|
|
KV Username
|
|
|
|
`TRAEFIK_PROVIDERS_FILE_DEBUGLOGGENERATEDTEMPLATE`:
|
|
Enable debug logging of generated configuration template. (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_FILE_DIRECTORY`:
|
|
Load dynamic configuration from one or more .toml or .yml files in a directory.
|
|
|
|
`TRAEFIK_PROVIDERS_FILE_FILENAME`:
|
|
Load dynamic configuration from a file.
|
|
|
|
`TRAEFIK_PROVIDERS_FILE_WATCH`:
|
|
Watch provider. (Default: ```true```)
|
|
|
|
`TRAEFIK_PROVIDERS_KUBERNETESCRD`:
|
|
Enable Kubernetes backend with default settings. (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_KUBERNETESCRD_CERTAUTHFILEPATH`:
|
|
Kubernetes certificate authority file path (not needed for in-cluster client).
|
|
|
|
`TRAEFIK_PROVIDERS_KUBERNETESCRD_DISABLEPASSHOSTHEADERS`:
|
|
Kubernetes disable PassHost Headers. (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_KUBERNETESCRD_ENDPOINT`:
|
|
Kubernetes server endpoint (required for external cluster client).
|
|
|
|
`TRAEFIK_PROVIDERS_KUBERNETESCRD_INGRESSCLASS`:
|
|
Value of kubernetes.io/ingress.class annotation to watch for.
|
|
|
|
`TRAEFIK_PROVIDERS_KUBERNETESCRD_LABELSELECTOR`:
|
|
Kubernetes label selector to use.
|
|
|
|
`TRAEFIK_PROVIDERS_KUBERNETESCRD_NAMESPACES`:
|
|
Kubernetes namespaces.
|
|
|
|
`TRAEFIK_PROVIDERS_KUBERNETESCRD_THROTTLEDURATION`:
|
|
Ingress refresh throttle duration (Default: ```0```)
|
|
|
|
`TRAEFIK_PROVIDERS_KUBERNETESCRD_TOKEN`:
|
|
Kubernetes bearer token (not needed for in-cluster client).
|
|
|
|
`TRAEFIK_PROVIDERS_KUBERNETESINGRESS`:
|
|
Enable Kubernetes backend with default settings. (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_KUBERNETESINGRESS_CERTAUTHFILEPATH`:
|
|
Kubernetes certificate authority file path (not needed for in-cluster client).
|
|
|
|
`TRAEFIK_PROVIDERS_KUBERNETESINGRESS_DISABLEPASSHOSTHEADERS`:
|
|
Kubernetes disable PassHost Headers. (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_KUBERNETESINGRESS_ENDPOINT`:
|
|
Kubernetes server endpoint (required for external cluster client).
|
|
|
|
`TRAEFIK_PROVIDERS_KUBERNETESINGRESS_INGRESSCLASS`:
|
|
Value of kubernetes.io/ingress.class annotation to watch for.
|
|
|
|
`TRAEFIK_PROVIDERS_KUBERNETESINGRESS_INGRESSENDPOINT_HOSTNAME`:
|
|
Hostname used for Kubernetes Ingress endpoints.
|
|
|
|
`TRAEFIK_PROVIDERS_KUBERNETESINGRESS_INGRESSENDPOINT_IP`:
|
|
IP used for Kubernetes Ingress endpoints.
|
|
|
|
`TRAEFIK_PROVIDERS_KUBERNETESINGRESS_INGRESSENDPOINT_PUBLISHEDSERVICE`:
|
|
Published Kubernetes Service to copy status from.
|
|
|
|
`TRAEFIK_PROVIDERS_KUBERNETESINGRESS_LABELSELECTOR`:
|
|
Kubernetes Ingress label selector to use.
|
|
|
|
`TRAEFIK_PROVIDERS_KUBERNETESINGRESS_NAMESPACES`:
|
|
Kubernetes namespaces.
|
|
|
|
`TRAEFIK_PROVIDERS_KUBERNETESINGRESS_THROTTLEDURATION`:
|
|
Ingress refresh throttle duration (Default: ```0```)
|
|
|
|
`TRAEFIK_PROVIDERS_KUBERNETESINGRESS_TOKEN`:
|
|
Kubernetes bearer token (not needed for in-cluster client).
|
|
|
|
`TRAEFIK_PROVIDERS_MARATHON`:
|
|
Enable Marathon backend with default settings. (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_MARATHON_BASIC_HTTPBASICAUTHUSER`:
|
|
Basic authentication User.
|
|
|
|
`TRAEFIK_PROVIDERS_MARATHON_BASIC_HTTPBASICPASSWORD`:
|
|
Basic authentication Password.
|
|
|
|
`TRAEFIK_PROVIDERS_MARATHON_CONSTRAINTS`:
|
|
Constraints is an expression that Traefik matches against the application's labels to determine whether to create any route for that application.
|
|
|
|
`TRAEFIK_PROVIDERS_MARATHON_DCOSTOKEN`:
|
|
DCOSToken for DCOS environment, This will override the Authorization header.
|
|
|
|
`TRAEFIK_PROVIDERS_MARATHON_DEFAULTRULE`:
|
|
Default rule. (Default: ```Host(`{{ normalize .Name }}`)```)
|
|
|
|
`TRAEFIK_PROVIDERS_MARATHON_DIALERTIMEOUT`:
|
|
Set a dialer timeout for Marathon. (Default: ```5```)
|
|
|
|
`TRAEFIK_PROVIDERS_MARATHON_ENDPOINT`:
|
|
Marathon server endpoint. You can also specify multiple endpoint for Marathon. (Default: ```http://127.0.0.1:8080```)
|
|
|
|
`TRAEFIK_PROVIDERS_MARATHON_EXPOSEDBYDEFAULT`:
|
|
Expose Marathon apps by default. (Default: ```true```)
|
|
|
|
`TRAEFIK_PROVIDERS_MARATHON_FORCETASKHOSTNAME`:
|
|
Force to use the task's hostname. (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_MARATHON_KEEPALIVE`:
|
|
Set a TCP Keep Alive time. (Default: ```10```)
|
|
|
|
`TRAEFIK_PROVIDERS_MARATHON_RESPECTREADINESSCHECKS`:
|
|
Filter out tasks with non-successful readiness checks during deployments. (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_MARATHON_RESPONSEHEADERTIMEOUT`:
|
|
Set a response header timeout for Marathon. (Default: ```60```)
|
|
|
|
`TRAEFIK_PROVIDERS_MARATHON_TLSHANDSHAKETIMEOUT`:
|
|
Set a TLS handshake timeout for Marathon. (Default: ```5```)
|
|
|
|
`TRAEFIK_PROVIDERS_MARATHON_TLS_CA`:
|
|
TLS CA
|
|
|
|
`TRAEFIK_PROVIDERS_MARATHON_TLS_CAOPTIONAL`:
|
|
TLS CA.Optional (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_MARATHON_TLS_CERT`:
|
|
TLS cert
|
|
|
|
`TRAEFIK_PROVIDERS_MARATHON_TLS_INSECURESKIPVERIFY`:
|
|
TLS insecure skip verify (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_MARATHON_TLS_KEY`:
|
|
TLS key
|
|
|
|
`TRAEFIK_PROVIDERS_MARATHON_TRACE`:
|
|
Display additional provider logs. (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_MARATHON_WATCH`:
|
|
Watch provider. (Default: ```true```)
|
|
|
|
`TRAEFIK_PROVIDERS_PROVIDERSTHROTTLEDURATION`:
|
|
Backends throttle duration: minimum duration between 2 events from providers before applying a new configuration. It avoids unnecessary reloads if multiples events are sent in a short amount of time. (Default: ```0```)
|
|
|
|
`TRAEFIK_PROVIDERS_RANCHER`:
|
|
Enable Rancher backend with default settings. (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_RANCHER_CONSTRAINTS`:
|
|
Constraints is an expression that Traefik matches against the container's labels to determine whether to create any route for that container.
|
|
|
|
`TRAEFIK_PROVIDERS_RANCHER_DEFAULTRULE`:
|
|
Default rule. (Default: ```Host(`{{ normalize .Name }}`)```)
|
|
|
|
`TRAEFIK_PROVIDERS_RANCHER_ENABLESERVICEHEALTHFILTER`:
|
|
Filter services with unhealthy states and inactive states. (Default: ```true```)
|
|
|
|
`TRAEFIK_PROVIDERS_RANCHER_EXPOSEDBYDEFAULT`:
|
|
Expose containers by default. (Default: ```true```)
|
|
|
|
`TRAEFIK_PROVIDERS_RANCHER_INTERVALPOLL`:
|
|
Poll the Rancher metadata service every 'rancher.refreshseconds' (less accurate). (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_RANCHER_PREFIX`:
|
|
Prefix used for accessing the Rancher metadata service. (Default: ```latest```)
|
|
|
|
`TRAEFIK_PROVIDERS_RANCHER_REFRESHSECONDS`:
|
|
Defines the polling interval in seconds. (Default: ```15```)
|
|
|
|
`TRAEFIK_PROVIDERS_RANCHER_WATCH`:
|
|
Watch provider. (Default: ```true```)
|
|
|
|
`TRAEFIK_PROVIDERS_REDIS`:
|
|
Enable Redis backend with default settings. (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_REDIS_ENDPOINTS`:
|
|
KV store endpoints (Default: ```127.0.0.1:6379```)
|
|
|
|
`TRAEFIK_PROVIDERS_REDIS_PASSWORD`:
|
|
KV Password
|
|
|
|
`TRAEFIK_PROVIDERS_REDIS_ROOTKEY`:
|
|
Root key used for KV store (Default: ```traefik```)
|
|
|
|
`TRAEFIK_PROVIDERS_REDIS_TLS_CA`:
|
|
TLS CA
|
|
|
|
`TRAEFIK_PROVIDERS_REDIS_TLS_CAOPTIONAL`:
|
|
TLS CA.Optional (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_REDIS_TLS_CERT`:
|
|
TLS cert
|
|
|
|
`TRAEFIK_PROVIDERS_REDIS_TLS_INSECURESKIPVERIFY`:
|
|
TLS insecure skip verify (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_REDIS_TLS_KEY`:
|
|
TLS key
|
|
|
|
`TRAEFIK_PROVIDERS_REDIS_USERNAME`:
|
|
KV Username
|
|
|
|
`TRAEFIK_PROVIDERS_REST`:
|
|
Enable Rest backend with default settings. (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_REST_INSECURE`:
|
|
Activate REST Provider directly on the entryPoint named traefik. (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_ZOOKEEPER`:
|
|
Enable ZooKeeper backend with default settings. (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_ZOOKEEPER_ENDPOINTS`:
|
|
KV store endpoints (Default: ```127.0.0.1:2181```)
|
|
|
|
`TRAEFIK_PROVIDERS_ZOOKEEPER_PASSWORD`:
|
|
KV Password
|
|
|
|
`TRAEFIK_PROVIDERS_ZOOKEEPER_ROOTKEY`:
|
|
Root key used for KV store (Default: ```traefik```)
|
|
|
|
`TRAEFIK_PROVIDERS_ZOOKEEPER_TLS_CA`:
|
|
TLS CA
|
|
|
|
`TRAEFIK_PROVIDERS_ZOOKEEPER_TLS_CAOPTIONAL`:
|
|
TLS CA.Optional (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_ZOOKEEPER_TLS_CERT`:
|
|
TLS cert
|
|
|
|
`TRAEFIK_PROVIDERS_ZOOKEEPER_TLS_INSECURESKIPVERIFY`:
|
|
TLS insecure skip verify (Default: ```false```)
|
|
|
|
`TRAEFIK_PROVIDERS_ZOOKEEPER_TLS_KEY`:
|
|
TLS key
|
|
|
|
`TRAEFIK_PROVIDERS_ZOOKEEPER_USERNAME`:
|
|
KV Username
|
|
|
|
`TRAEFIK_SERVERSTRANSPORT_FORWARDINGTIMEOUTS_DIALTIMEOUT`:
|
|
The amount of time to wait until a connection to a backend server can be established. If zero, no timeout exists. (Default: ```30```)
|
|
|
|
`TRAEFIK_SERVERSTRANSPORT_FORWARDINGTIMEOUTS_IDLECONNTIMEOUT`:
|
|
The maximum period for which an idle HTTP keep-alive connection will remain open before closing itself (Default: ```90```)
|
|
|
|
`TRAEFIK_SERVERSTRANSPORT_FORWARDINGTIMEOUTS_RESPONSEHEADERTIMEOUT`:
|
|
The amount of time to wait for a server's response headers after fully writing the request (including its body, if any). If zero, no timeout exists. (Default: ```0```)
|
|
|
|
`TRAEFIK_SERVERSTRANSPORT_INSECURESKIPVERIFY`:
|
|
Disable SSL certificate verification. (Default: ```false```)
|
|
|
|
`TRAEFIK_SERVERSTRANSPORT_MAXIDLECONNSPERHOST`:
|
|
If non-zero, controls the maximum idle (keep-alive) to keep per-host. If zero, DefaultMaxIdleConnsPerHost is used (Default: ```0```)
|
|
|
|
`TRAEFIK_SERVERSTRANSPORT_ROOTCAS`:
|
|
Add cert file for self-signed certificate.
|
|
|
|
`TRAEFIK_TRACING`:
|
|
OpenTracing configuration. (Default: ```false```)
|
|
|
|
`TRAEFIK_TRACING_DATADOG`:
|
|
Settings for Datadog. (Default: ```false```)
|
|
|
|
`TRAEFIK_TRACING_DATADOG_BAGAGEPREFIXHEADERNAME`:
|
|
Specifies the header name prefix that will be used to store baggage items in a map.
|
|
|
|
`TRAEFIK_TRACING_DATADOG_DEBUG`:
|
|
Enable Datadog debug. (Default: ```false```)
|
|
|
|
`TRAEFIK_TRACING_DATADOG_GLOBALTAG`:
|
|
Key:Value tag to be set on all the spans.
|
|
|
|
`TRAEFIK_TRACING_DATADOG_LOCALAGENTHOSTPORT`:
|
|
Set datadog-agent's host:port that the reporter will used. (Default: ```localhost:8126```)
|
|
|
|
`TRAEFIK_TRACING_DATADOG_PARENTIDHEADERNAME`:
|
|
Specifies the header name that will be used to store the parent ID.
|
|
|
|
`TRAEFIK_TRACING_DATADOG_PRIORITYSAMPLING`:
|
|
Enable priority sampling. When using distributed tracing, this option must be enabled in order to get all the parts of a distributed trace sampled. (Default: ```false```)
|
|
|
|
`TRAEFIK_TRACING_DATADOG_SAMPLINGPRIORITYHEADERNAME`:
|
|
Specifies the header name that will be used to store the sampling priority.
|
|
|
|
`TRAEFIK_TRACING_DATADOG_TRACEIDHEADERNAME`:
|
|
Specifies the header name that will be used to store the trace ID.
|
|
|
|
`TRAEFIK_TRACING_ELASTIC`:
|
|
Settings for Elastic. (Default: ```false```)
|
|
|
|
`TRAEFIK_TRACING_ELASTIC_SECRETTOKEN`:
|
|
Set the token used to connect to Elastic APM Server.
|
|
|
|
`TRAEFIK_TRACING_ELASTIC_SERVERURL`:
|
|
Set the URL of the Elastic APM server.
|
|
|
|
`TRAEFIK_TRACING_ELASTIC_SERVICEENVIRONMENT`:
|
|
Set the name of the environment Traefik is deployed in, e.g. 'production' or 'staging'.
|
|
|
|
`TRAEFIK_TRACING_HAYSTACK`:
|
|
Settings for Haystack. (Default: ```false```)
|
|
|
|
`TRAEFIK_TRACING_HAYSTACK_BAGGAGEPREFIXHEADERNAME`:
|
|
Specifies the header name prefix that will be used to store baggage items in a map.
|
|
|
|
`TRAEFIK_TRACING_HAYSTACK_GLOBALTAG`:
|
|
Key:Value tag to be set on all the spans.
|
|
|
|
`TRAEFIK_TRACING_HAYSTACK_LOCALAGENTHOST`:
|
|
Set haystack-agent's host that the reporter will used. (Default: ```127.0.0.1```)
|
|
|
|
`TRAEFIK_TRACING_HAYSTACK_LOCALAGENTPORT`:
|
|
Set haystack-agent's port that the reporter will used. (Default: ```35000```)
|
|
|
|
`TRAEFIK_TRACING_HAYSTACK_PARENTIDHEADERNAME`:
|
|
Specifies the header name that will be used to store the parent ID.
|
|
|
|
`TRAEFIK_TRACING_HAYSTACK_SPANIDHEADERNAME`:
|
|
Specifies the header name that will be used to store the span ID.
|
|
|
|
`TRAEFIK_TRACING_HAYSTACK_TRACEIDHEADERNAME`:
|
|
Specifies the header name that will be used to store the trace ID.
|
|
|
|
`TRAEFIK_TRACING_INSTANA`:
|
|
Settings for Instana. (Default: ```false```)
|
|
|
|
`TRAEFIK_TRACING_INSTANA_LOCALAGENTHOST`:
|
|
Set instana-agent's host that the reporter will used.
|
|
|
|
`TRAEFIK_TRACING_INSTANA_LOCALAGENTPORT`:
|
|
Set instana-agent's port that the reporter will used. (Default: ```42699```)
|
|
|
|
`TRAEFIK_TRACING_INSTANA_LOGLEVEL`:
|
|
Set instana-agent's log level. ('error','warn','info','debug') (Default: ```info```)
|
|
|
|
`TRAEFIK_TRACING_JAEGER`:
|
|
Settings for Jaeger. (Default: ```false```)
|
|
|
|
`TRAEFIK_TRACING_JAEGER_COLLECTOR_ENDPOINT`:
|
|
Instructs reporter to send spans to jaeger-collector at this URL.
|
|
|
|
`TRAEFIK_TRACING_JAEGER_COLLECTOR_PASSWORD`:
|
|
Password for basic http authentication when sending spans to jaeger-collector.
|
|
|
|
`TRAEFIK_TRACING_JAEGER_COLLECTOR_USER`:
|
|
User for basic http authentication when sending spans to jaeger-collector.
|
|
|
|
`TRAEFIK_TRACING_JAEGER_GEN128BIT`:
|
|
Generate 128 bit span IDs. (Default: ```false```)
|
|
|
|
`TRAEFIK_TRACING_JAEGER_LOCALAGENTHOSTPORT`:
|
|
Set jaeger-agent's host:port that the reporter will used. (Default: ```127.0.0.1:6831```)
|
|
|
|
`TRAEFIK_TRACING_JAEGER_PROPAGATION`:
|
|
Which propagation format to use (jaeger/b3). (Default: ```jaeger```)
|
|
|
|
`TRAEFIK_TRACING_JAEGER_SAMPLINGPARAM`:
|
|
Set the sampling parameter. (Default: ```1.000000```)
|
|
|
|
`TRAEFIK_TRACING_JAEGER_SAMPLINGSERVERURL`:
|
|
Set the sampling server url. (Default: ```http://localhost:5778/sampling```)
|
|
|
|
`TRAEFIK_TRACING_JAEGER_SAMPLINGTYPE`:
|
|
Set the sampling type. (Default: ```const```)
|
|
|
|
`TRAEFIK_TRACING_JAEGER_TRACECONTEXTHEADERNAME`:
|
|
Set the header to use for the trace-id. (Default: ```uber-trace-id```)
|
|
|
|
`TRAEFIK_TRACING_SERVICENAME`:
|
|
Set the name for this service. (Default: ```traefik```)
|
|
|
|
`TRAEFIK_TRACING_SPANNAMELIMIT`:
|
|
Set the maximum character limit for Span names (default 0 = no limit). (Default: ```0```)
|
|
|
|
`TRAEFIK_TRACING_ZIPKIN`:
|
|
Settings for Zipkin. (Default: ```false```)
|
|
|
|
`TRAEFIK_TRACING_ZIPKIN_HTTPENDPOINT`:
|
|
HTTP Endpoint to report traces to. (Default: ```http://localhost:9411/api/v2/spans```)
|
|
|
|
`TRAEFIK_TRACING_ZIPKIN_ID128BIT`:
|
|
Use Zipkin 128 bit root span IDs. (Default: ```true```)
|
|
|
|
`TRAEFIK_TRACING_ZIPKIN_SAMESPAN`:
|
|
Use Zipkin SameSpan RPC style traces. (Default: ```false```)
|
|
|
|
`TRAEFIK_TRACING_ZIPKIN_SAMPLERATE`:
|
|
The rate between 0.0 and 1.0 of requests to trace. (Default: ```1.000000```)
|