---
traefik:
  ports:
    web:
      redirectTo:
        port: websecure

  # Options for the main traefik service, where the entrypoints traffic comes
  # from.
  service:
    annotations: {
      metallb.universe.tf/loadBalancerIPs: "192.168.48.21"
    }
    single: false

  tlsStore:
    default:
      defaultCertificate:
        secretName: tls-cert

  ingressClass:
    enabled: true

  ingressRoute:
    dashboard:
      enabled: false

  providers:
    kubernetesCRD:
      ingressClass: traefik
      allowCrossNamespace: true
      allowExternalNameServices: true
    kubernetesIngress:
      ingressClass: traefik
      allowExternalNameServices: true
      publishedService:
        enabled: true

  logs:
    access:
      enabled: true
      filters:
        statuscodes: "400-405,500"
        minDuration: "10ms"