http:
  middlewares:
    https-redirect:
      redirectScheme:
        scheme: https

    default-allowlist:
      IPAllowList:
        sourceRange:
          - '10.0.0.0/8'
          - '172.16.0.0/12'
          - '192.168.0.0/16'

    secured:
      chain:
        middlewares:
          - default-allowlist

    basic-auth:
      basicAuth:
        usersFile: '/usersFile'

# https://docs.traefik.io/https/tls/#minimum-tls-version
tls:
  options:
    default:
      minVersion: VersionTLS12
      sniStrict: true
      cipherSuites:
        - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
        - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
        - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384